If the request parameters are passed to create_with and where they can
be used to do mass assignment when used in combination with
Relation#create.

Fixes CVE-2014-3514

Conflicts:
	activerecord/lib/active_record/relation/query_methods.rb

Add a test case of nested empty array values in conditions

Fix rails-html_sanitizer in Gemfile template

[skip ci]

Fix ActiveJob isolation tests.

Use #model_name on instances instead of classes

Add a `required` option to the model generator

Conflicts:
	Gemfile

Deprecate NamedRouteCollection#helpers.

Conflicts:
	actionpack/CHANGELOG.md

This method was removed at 210b338d but it is
used by third party gems to check if a named route was defined. To help on the
upgrade path on 4.2.0 we bring it back and emit a deprecation warning.

Change the default `null` value for timestamps

Update, unify, encapsulate, and fix various code tools in Rails

Prepare for partial release.

Integrate ActiveJob / DeliverLater / GlobalID with Rails

Lock web-console to 2.0.0.beta1 for the first 4.2 beta