add assert equals test method
use reflect deep equal
Merge pull request #118 from nolman/assertequals

add assert equals test method
Move code: Extract some mvc_test into params_test
Permit multi-embedding of *Controller

This (breaking) change:
- Requires that all embeddings of Controller are by pointer
- Performs an exhaustive search of embedded / anonymous fields for
*Controllers to set (previously it only searched in the first field)
- Ensures that all *Controller pointers are set to the same instance.

The goal is to standardize the mechanism of "mixing in" behaviors
(fields, interceptors, etc) by giving each "trait"
(Controller-embedding class that provides shared functionality) access
to the same *Controller, which is accomplished by simply duplicating
the pointers in each type.

The developer should always embed *Controller as the first field when
making either a regular user-facing Controller or one meant for mixing.
Invoke interceptors on multi-embedded Controllers
adding a shallow equals assert
using tplEq for assert equal
rename tplEq to Equal
Equal is more of a util function then a template specific function
fix formating
Merge pull request #124 from nolman/AssertDeepEquals

adding a shallow equals assert
Fixed an injection vulnerability in session management.

If any session key or value contains a null byte, then the part after
the null is parsed as a separate key/value pair. This fixes it for now
by disallowing null bytes; long term, it may be safer (and almost
certainly smaller) to precede the fields with a length.
If no secret key is set, disable signing
Cleaned up a minor style point
Merge pull request #127 from UpstandingHackers/pull-req-session-injection

Fixed an injection vulnerability in session management.