Don't reload middleware stack every request

Bump to 2.3.14.github32

CVE-2013-6417

CVE-2013-6415: Escape the unit value provided to number_to_currency

Fixes CVE-2013-6415.

Previously the values were trusted blindly allowing for potential XSS attacks.

This is different from the original upstream patch for 3.x in that return values
from other number helper methods are not marked as html_safe, so the html
escaping always applies. This requires applications to explicitly set .html_safe
on unit strings and number separators when calling number_to_currency.

Load timezone data from one big marshalled file

Don't turn constant names into strings prematurely

Remove ActiveResource

Kill whiny nils

Avoid extension when instantiating extended association

Pull in ActiveSupport::Concern

We have quite a few module dependency situations that this can help
clarify.

Don't globally invalidate the method and constant cache every view render