adapted time zone tests to argentina's use of DST, refs #584
fixed the issue where ecurity filters cannot perform checks in addition to isSecure(), closes #595
CHANGELOG, RELEASE_NOTES and a new UPGRADING document with instructions, all for #595
merge 5243b4edd12a1e246d7f7e00332b8a805ae87a35
merge eb5ea2cc32072a22be9a6f55647d3edc6dbe4ebb
merge d39954591490411b45c9ed7ce33679a6cc14a0df
merge ddde8d16edd59ad791770160b6291826d6288e3c
merge 21e42def98e28b9d618c3027412548c9957a8c05
Deprecated AgaviSecureWebRequest, closes #600
Allow arrays as values for web request sources. That way, you can, for example, make Agavi try HTTP_X_FORWARDED_SERVER first, and SERVER_NAME second for the SERVER_NAME source. The last value in the list will be the static fallback value if nothing is found ultimately. Closes #599
Moved AgaviWebRequest::getSourceValue() to AgaviRequest, closes #610
moar changelogs
Deprecated directive "core.use_routing" in favor of a routing config parameter ("enabled"), closes #607
Info about deprecated stuff
merging 5706774099ebf5170b2056f65e3fbd912205dea2
merging a25c9000d9b26303d86801cc4753708cd3d8c021
merging 4b484bfd694a9c06aca1d613aaeab673382c058b to 2a13ef96e6120c5ffb7b9c71caa94e9e269fb236
merge 186fcf88b0eed60baab72e1e0fb252e0a951d222
merge 73b6ced1d5817ecbf8edd427804ce4d5024103bb to f6928b92149928921bd33aa782e5d057366587a0
merging a7456a67f5223100c9ba75b51ab1bbb825ada322 to 6e534ae0a9b38fb51281f367745cf2e34ca44ae0