CSRF warning docs on Request::enableHttpMethodParameterOverride()

[HttpFoundation] fixed the docs so that it gives some explanation about how you are vulnerable to CSRF when you enable the httpMethodeParameterOverride
Removed fixed height from profiler resume box.
[Form] fix form handling with unconventional request methods like OPTIONS
[Config] fix filelocator with empty name
[DependencyInjection] use inheritdoc for loaders
[Validator] Fixed Regex::getHtmlPattern() to work with complex and negated patterns
[VarDumper] fix control chars styling
[EventDispatcher] perf optim
[HttpKernel] fix DebugHandlersListener
[Form] Fixed usage of "name" variable in form_start block
updated CHANGELOG for 2.3.21
update CONTRIBUTORS for 2.3.21
updated VERSION for 2.3.21
bumped Symfony version to 2.3.22
updated CHANGELOG for 2.5.6
updated VERSION for 2.5.6
bumped Symfony version to 2.5.7
Improved the phpdoc for security token classes
[Security][listener] change priority of switchuser
[OptionsResolver] fix counting of options

and make sure the tests are compatible with phpunit strict mode