Update therubyracer/libv8 to fix #1387
fix finding user in message_gateway
remove caching from viewing dependencies

this causes stack overflow in some cases
add verbose action description to cache invariant to handle changes in this setting. fixes #1409
Disable #yaml_import action for now

This was dead code anyway

thanks @brynary
Use setting from stie.yml instead of hardcoded secret token

Fallback to randomly generated token, which is fine for development and test mode. (Sessions will be invalidated when the server reboots)

Thanks @brynary
 Do not symbolize arbitray locale params

* Validate locale is valid before assigning it
* Don't convert invalid locales to symbols (creates DoS risk)

thanks @brynary
Introduce #onsite_redirect_to helper for onsite redirects

Prefer #onsite_redirect_to to #redirect_to when using untrusted input (e.g. cookies) in the redirect destination

Thanks @brynary
bump version number
Update es.yml
ignore /bin dir
fix #1429 by correctly handling tags with dots

This was a very old regression. This used to work before the rails 3.2 upgrade... Added tests 
to prevent future unnoticed breakage
Merge pull request #182 from sansaturno/2.2_branch

Update es.yml
fix #1417. We now handle unblocking a todo that is part of a hidden project or context
fix #1419. A new todo with show_from set should not be added to the homepage
fix #1422. Changing default tags of a project is now remembered
when not updating the whole page
update gems
fix #1406. fix #1431. set recurring_period first before setting other attributes
update to Rails 3.2.14
update gem dependencies