squid: Update to 3.4.7

Solves a DoS issue "Ignore Range headers with unidentifiable byte-range values"
filed under security advisory SQUID-2014:2 and CVE-2014-3609.
proxy.cgi: Move ACL definitions up

ACl definitions could not be used in some other directives
unless they are defined earlier.