updates from CakePHP 2.5-RC1 to 2.5-RC2
code comments
updates .editorconfig
disable SecurityComponent for Api