make sure we sanitize the coupon_code input
refactored the find_promo_for_coupon_code and added spec
Reference states.js exactly

Fixes issue where in production the route may be:

<script src=//myappname-spree-staging-assets.s3.amazonaws.com/states.js type=text/javascript></script>
<script src=//myappname-spree-staging-assets.s3.amazonaws.com/assets/admin/address_states-444635bf9f1506dc0f644eec388b4e4b.js type=text/javascript></script>
Add admin/states.js to precompile list
pretty_time should display minutes, not month

Fixes #4207
use twelve-hour clock in pretty_time

if we're going to use the AM/PM field `%p` then we should use the 12-hour representation, rather than the 24-hour representation

Fixes #4208
Bump to 1.3.6.beta