re-use content-type for files from Play response (if already set)
[#1815] prevent XXE vulnerability in play.libs.XML and provide safe newDocumentBuilder() for applications
[#1815] use safe DocumentBuilder in WS
add another very useful getDocument() method that parses an InputStream
[#1819] Update to Groovy V2.3.1 (without “invoke dynamic”)
[#1819] Update to xtream V1.7.7
[#1809] Update to ASM V5.0.2, javaflow r 1590792, javassist 3.18.2-GA
[#1827] build em factory after we have redefined Hibernate's classloader

Otherwise Play doesn't start in precompiled mode with Hibernate throwing ClassNotFoundExceptions for entity classes.
Merge branch 'xael-fry-lighthouse-1809-patch' into 1.3.x
Merge pull request #764 from codeborne/xxe-vulnerability-fix

[#1815] Fix XXE vulnerability in XML.getDocument()
Merge pull request #759 from sbeigel/fix-reuse-content-type

Fix:  Reuse content type
release notes
[Documentation] Rename playframework.org URL to playframework.com
[Documentation] Remove a rogue square bracket in cmd-start.txt
[#1831] Fix transitive module loading
[#1830] Upgrade to netty v3.9.2 because of security vulnerability
* Update application-skel default java.source value to 1.6, as 1.5 is no longer supported
[#1809] Add patch for javaflow
* some code cleanup
* [Dependencies] Fix dependencies version related to spymemcached
* [Multi db] fix some misused of db properties
[#1835] Use jpa.default.ddl instead of default.jpa.ddl
[#1831] Fix loading modules for avoiding circular loading
Merge pull request #767 from codeborne/hibernate-classloader-fix

[#1827] Fix Play 1.3 starting in precompiled mode