FileHandler should not be called for files outside the root

FileHandler#matches? should return false for files that are outside the
"root" path.

Conflicts:
	actionpack/lib/action_dispatch/middleware/static.rb
bumping version to 4.0.11
Merge branch '4.0.11' into 4-0-stable

* 4.0.11:
  bumping version to 4.0.11
  FileHandler should not be called for files outside the root