Merge pull request #179 from C-Otto/master

Typo
Move Project#create_from_todo to its own class

The point of this is to keep as many things out of the ActiveRecord
objects as possible and use them as just a thin database abstraction
layer.
fix clearing show_from fails 

caused by slightly different (better) workings of aasm
small refactorings 

fix passing params in use of _collection
fix failing tests on ruby 1.9.3

funny, this is the first one not failing on 2.0.0 but failing on 1.9.3. Thanks for Travis!
fix failing scenario caused by different aasm semantics

also switch to css selector to hopefully fix the failure on travis
increase test coverage of some models
small refactorings
fix regression
Disable #yaml_import action for now

This was dead code anyway

thanks @brynary
Use setting from stie.yml instead of hardcoded secret token

Fallback to randomly generated token, which is fine for development and test mode. (Sessions will be invalidated when the server reboots)

Thanks @brynary
 Do not symbolize arbitray locale params

* Validate locale is valid before assigning it
* Don't convert invalid locales to symbols (creates DoS risk)

thanks @brynary
Introduce #onsite_redirect_to helper for onsite redirects

Prefer #onsite_redirect_to to #redirect_to when using untrusted input (e.g. cookies) in the redirect destination

Thanks @brynary
sync docs with 2.2
remove duplication of all_done_todos and done_todos in project and context container
remove duplication in feedlist controller
ignore: trying to find issue on failing scenario on Travis
update configs for rails 4
move tests to new directory
start fixing deprecation warnings