correctly escape backslashes in request path globs

make sure that unreadable files are also not leaked

CVE-2014-7829
Preparing for 4.0.11.1 release
Merge branch '4-0-11-1' into 4-0-stable

Conflicts:
	RAILS_VERSION
	actionmailer/lib/action_mailer/version.rb
	actionpack/lib/action_pack/version.rb
	activemodel/lib/active_model/version.rb
	activerecord/lib/active_record/version.rb
	activesupport/lib/active_support/version.rb
	railties/lib/rails/version.rb
	version.rb