Fixed while traveling to heuruko

Replace references to ActiveSupport::SecureRandom with just SecureRandom, and require 'securerandom' from the stdlib when active support is required.

This reduces false positives that come from using ints in params in
tests, which do not get converted to strings in the tests. In
implementations going through rack, they do get converted to strings.

- David Chelimsky and Sam Umbach

renamed the wrap_parameters :only and :except options to :include and :exclude to make it consistent with controller filters

Normally the table for abstract class won't be existed, so we should not trying to call `#column_names` on it.

Get around weird missing constant error caused by AS instead of simply raising NameError, closes #477.

raise an error if the old router draw method is used, along with a message advising them to either upgrade their routes or add rails_legacy_mapper to their Gemfile

I have to keep in mind that 1.8.7 does *not* preserve the hash order.

Guys, let's move to use 1.9.2 in production!

This will allow us to do a rootless JSON/XML request to server.

since ActionDispatch::Http::Parameters#encode_params will force encoding on all params strings (when using an encoding aware Ruby), dup all strings passed into process.  This prevents modification of params passed in and, more importantly, doesn't barf when a frozen string is passed
thanks and high fives to kinsteronline

Signed-off-by: NJosé Valim <jose.valim@gmail.com>

Currently, we output:

  "><script type="text/javascript">window.location = "/500.html"</script></html>

Added stream as class level method to make it explicit when to stream.
Render also accepts :stream as option.

- Closes #6692
Signed-off-by: NJosé Valim <jose.valim@gmail.com>

After a long list of discussion about the performance problem from using varargs and the reason that we can't find a great pair for it, it would be best to remove support for it for now.

It will come back if we can find a good pair for it. For now, Bon Voyage, `#among?`.