Swapped conditions to get all the builds in timeline graph.

Since the builds are sorted from most to least recent, the limit
method discarded the builds not in the same day as the last one.
Added test for byTimestamp method in RunList.
Fixed indentation.
Revert 33db54459a80adb8fe435a96956d3f22dd033414
Fix autocompletion for items in folders
[FIXED SECURITY-73] Require RUN_SCRIPTS for /heapDump.
[FIXED SECURITY-74] Apply markup formatter to remote cause note.
[FIXED SECURITY-75] Invalidate session after login to avoid session fixation
[FIXED SECURITY-76] Prevent iframe injection, forbid iframe by default
[FIXED SECURITY-77] XSS in iconSize cookie.
[FIXED SECURITY-79] Prevent (private security realm) usernames from being guessed.
[FIXED SECURITY-80] Add X-Frame-Options head to prevent clickjacking attacks
[FIXED SECURITY-88] Forbid offsite-bound forms in default markup formatter policy.
[FIXED SECURITY-89] When checking an API token, verify that the user actually exists.
[FIXED SECURITY-93] PasswordParameterDefinition should serve existing default value in encrypted form.
And strengthen functional tests (using configRoundTrip) to ensure that the same mistake is not made elsewhere.
[FIXED SECURITY-106] Jenkins on Winstone vulnerable to session hijacking.
[FIXED SECURITY-107] When security-related fields in Jenkins cannot be unmarshaled, it is best to halt startup.
[FIXED SECURITY-108] Check job name created via CLI
[FIXED SECURITY-109] SECURITY-55 fix to BuildTrigger configuration failed if downstream project was not visible.
[SECURITY-76] [SECURITY-88] Adjust test to policy changes.