Add withoutPlugins to Java FakeApplication
Update Jackson API methods
[Documentation] Add the route for the Javascript router.
Merge pull request #1450 from gmethvin/jackson

Update Jackson API methods
Merge pull request #1523 from ndeverge/patch-5

[Documentation] Add the route for the Javascript router.
Fix Enumeratee.mapInputFlatten and Enumerator.unfold to take a ExecutionContext
Small note to remind the user to check out the new functionality available to the start script.
Handle spaces and URL-encoded characters in assets
Merge pull request #1522 from gmethvin/assets

Handle spaces and URL-encoded characters in assets
Allowed JAVA_HOME to be set from the command line
Fix issues with asset serving

* Add leading slash to file paths
* Handle file paths that are also valid URIs
Fixed some typos in "The Project class" chapter
Merge pull request #1532 from oliskin/patch-3

Fixed some typos in "The Project class" chapter
Merge pull request #1529 from kmile/use_java_home

Allowed JAVA_HOME to be set from the command line
Spec compliant media type parsing

Parsing media types is actually very complex, and previously Play was
doing a hacky series of splits, which usually work, but as soon as
something slightly different from what typical clients send came, would
not work at all.

The following changes have been made:

* New MediaType class that has the type, plus a sequence of the
  parameters, parsed according to RFC 2616, so they support everything
  including quoted parameter values, parameterless values, etc etc.
* New mediaType method on RequestHeader for parsing the Content-Type.
* contentType and charset methods on RequestHeader now use the new
  mediaType method to correctly parse the header.
* multipart/form-data now uses the mediaType method to correctly get the
  boundary parameter, fixing #1399.
* MediaRange now extends MediaType, and has a q value and a sequence of
  accept extensions.
* MediaRange sorting is now stable, equal q value/specificity media
  ranges are in the same order as in the Accept header.
* Matching of types, sub types and parameter names is now down case
  insensitively, in accordance with the spec.  Previously contentType
  was always converted to lower case (in a way that was susceptible to
  the turkish i bug), now it's left alone.

The new parser uses Scala parser combinators.  In order to correctly
parse quoted parameters, a parser like this was necessary, since
delimiters may appear in the quoted values, which would break split. A
benchmark of a relatively complex accept header (6 elements) showed it
takes 40us to parse it on my machine.

At some point in future we may decide to extract some of the parsing out
into a generic class for reuse in other parts of Play, but for now I
just wanted to get this fix finished without over engineering.
CSRF improvements

* Refactored CSRF handling
* Allowed better script/ajax integration
* Allowed per action CSRF handling
* Fixed BREACH vulnerability
* Added documentation for CSRF
* Made action builders more composable
Merge pull request #1475 from wsargent/fix-1475

Clean up PlayWS documentation for 2.2
Merge pull request #1508 from jroper/csrf-refactor

CSRF improvements
Upgraded to sbt 0.13.0
It was possible for a race condition to occur (see https://github.com/playframework/playframework/pull/1294#commitcomment-3895065).

The issue is fixed by ensuring that only one caller is able to instantiate the client at a time.