Merge tag '0.4.0' into develop

Improved security model
User-code can now safely call toString() on functions. This is important to support 3rd party modules like nunjucks, cheerio, and others.
Improved security test case descriptions and removed dead code
Merge branch 'feature/function-tostring' into develop
verion bump
Merge branch 'release/0.4.1'