Tokenizer now handles cases where right square bracket ("]") is the first character of a range within a character class. Previously the "special" state for handling an initial character of "]" only recognised T_GROUP_CHARACTER.