fix #254
#254 add controller func SessionRegenerateID
fix #248
fix #140
fix #277
fix #277
support reverse m2m relation
orm set relation column name #259
filter http method fix #279
fix #280
fix #283
add UrlFor function but still improve
JSON CallBack类型的链接，这类出现在几乎各大Web 2.0网站中。修补这类安全问题很简单，只要在目标网页开头部分强制加一个空格即可，这样BOM头就无效了。
orm #276
add util func to get the url fix #282

UrlFor(endpoint string, values ...string) string
fix #284
when runmode is dev it will show warning ingo

if have a attack url, the info is
add more json test info
Update template.go

We can specify "TemplateLeft" and "TemplateRight" but they did not work as these two changes are required.
Merge pull request #287 from francoishill/patch-1

Update template.go