Tidied.
Fixed: Incorrect handling of special characters in DynamicFields (bug#10361).
Fixed: Dynamic Field: Multi Select does not allow empty values (bug#10318).
Fixed: OTRS does not protect against clickjacking (bug#10374).

Conflicts:
	CHANGES.md
	Kernel/Output/HTML/Standard/CustomerHeader.dtl
	Kernel/Output/HTML/Standard/CustomerHeaderSmall.dtl
	Kernel/Output/HTML/Standard/Header.dtl
	Kernel/Output/HTML/Standard/HeaderSmall.dtl
	Kernel/Output/HTML/Standard/Login.dtl
	Kernel/Output/HTML/Standard/PrintHeader.dtl
Fixed: Deleting the attachment deletes the  recepients too (bug#10334).
Squashed commit of the following:

commit 659c42686f319595d61d17f0be82c4974cde6212
Author: s7design <otrs@s7designcreative.com>
Date:   Fri Mar 14 15:06:05 2014 +0100

    [Bug 10334] Deleting the attachment deletes the recepients , too

    Changed wrong  variable in  AgentTicketForvard.dtl, and added increment counter for Customer for MultipleCustomerTo/ MultipleCustomerCc/ MultipleCustomerBcc

Conflicts:
	CHANGES.md
Follow-up fix for bug#10361: Incorrect handling of special characters in DynamicFields.
Prepare for release.
Tidied.
Fixed: vertical scroll not shown in search screen (bug#10413).
Fixed: Transition or Transition Action popup a login page (bug#10402).
Modified check for session data.
Fixed bug 9970 - Existing sequences on oracle databases produces errors.
Fixed FAO display.
Fixed incorrect relative time calculation for minute range.
Fixed: SessionID created with generic interface wont work using it as Agent (bug#10378).

Conflicts:
	CHANGES.md
Followup for bug#10378 - SessionID created with generic interface wont work using it as Agent.

Conflicts:
	Kernel/GenericInterface/Operation/Session/Common.pm
Fixed unit test.
Fixed: ACLs not working correctly in CustomerTicketZoom (Message Followup) (bug#10432).

Conflicts:
	CHANGES.md
Followup for bug#10432 - ACLs not working correctly in CustomerTicketZoom (Message Followup).
Fixed: Process Modules, Dynamic Fields, and ACLs with AJAX update (bug#10202).