Added ActiveRecord::Base#has_secure_password (via ActiveModel::SecurePassword) to encapsulate dead-simple password usage with SHA2 encryption and salting

This reverts commit 006ec77e.

dragdrop was tested twice and effects.js was missing, added checks for controls.js, dragdrop.js and effects.js to another test

Fix problem with duplicated records when a :uniq :through association is preloaded [#2447 state:resolved]

* rename method names (actually in tests)
* rename instance variable @_named_scopes_cache to @_scopes_cache
* rename references in doc comments
* don't touch CHANGELOG :)

NilClass.type is no longer defined in Ruby 1.9 and causes ActiveRecord::Base.to_xml to fail with message: undefined method `type' for nil:NilClass

removed info about deprecated rake tasks, documented the sandbox option for the rails console and minor corrections

Verify that creating a has_many through record where there is a default_scope on the join model works correctly (creates the join record with the default scope applied)

Dont set explicit domain for cookies if host is not a domain name

[#6002 state:committed]
Signed-off-by: NSantiago Pastorino <santiago@wyeworks.com>

When using stylesheet_link_tag(:all) or javascript_include_tag(:all),
assets directories are searched for css or js files. When
config.serve_static_assets is set to true, those files can be
served directly from engine's directories. That's why assets paths
should be set individually for controllers inside engine
if we want to serve static assets with ActionDispatch::Static