`yii\web\Request::cookieValidationKey` is now automatically generated by the installation script for the basic and advanced application templates
Request::cookieValidationKey must be explicitly specified now.
Fixed test break.
Missing return after running hash_pbkdf2()
Merge branch 'master' of git://github.com/yiisoft/yii2 into 4131-key-longer-than-hash