be more specific about csrf token and ajax - not whitelisted outside of jquery-rails [ci skip]
`find_in_batches` now returns an `Enumerator` when called without a block, so that it
can be chained with other `Enumerable` methods.
Fix breakage in XmlMini

- Boolean parsing breaks on non strings (i.e. integer 1|0)
- Symbol parsing breaks on non strings.
- BigDecimal parsing breaks due to missing require.
- Update changelog.
psql implementation of #index_name_exists?
app_rails_loader.rb should check if bin/rails is a File before calling File.read(exe); closes #13825
Merge pull request #13828 from bronzle/apploader-should-check-for-file

app_rails_loader.rb should check if bin/rails is a File before calling F...
Add a test-case for GH #13825
Reordered classes in AR Validation #validates_with example [ci skip]

Person called GoodnessValidator before it was defined.
This change will compile the example correctly.
Merge pull request #13829 from qsymmachus/improve_validates_with_example

Reordered classes in AR Validation #validates_with example [ci skip]
Fix `ActiveRecord::RecordNotFound` error message with custom primary key
Merge pull request #13785 from kuldeepaggarwal/fix-find_with_multiple_ids

Fix `ActiveRecord::RecordNotFound` error message with custom primary key
Remove unused argument.
Rewrote the tests for has_secure_password
Restored the ability to clear the password with user.password= nil (see the docs)
Got all the new tests passing
Removed old tests
Some minor fixes
Merge pull request #13835 from frodsan/remove_unused_argument

Remove unused argument.
Merge pull request #13772 from chancancode/fix_has_secure_password_for_good

Refactored validations rules for has_secure_password
Transform dashes to underscores in resource route names

Fixes #13824