Implemented IDisposable on System.Security.Cryptography.DeriveBytes to match the .Net 4.0 implementation.
From: Chris Shaffer <chris@chrisshaffer.net>

It returns a boolean 'false' when the passed string matches (case-insensitively) 'false' or
is empty, returns 'true' otherwise.
All the other types (and a null value) cause it to throw the NotSupportedException.

* FlashCrossDomainPolicyParser.cs: Skip, not throw, if we find a non-
element node type in a flash policy file.

This is for bugfix #687580.

This fixes bug #667329.

The problem was that ManagedThreadId was created from a per-appdomain
counter, but stored in a per-thread storage, so if two threads could
end up with the same ManagedThreadId if a second appdomain executed
on the second thread first.

Part of bugfix #687580.

http://localhost/x + X should not result in http://localhost/xX.

[asp.net] Fix for bug #685116. AJAX post-back which redirects the browser does not need a Page or ScriptManager instance

	Fixes bug #687399.

	* mini-posix.c (mono_runtime_posix_install_handlers): Only
	install sigusr1 if the new machinery is not enabled.

	* mono-threads.c: Add new suspend machinery. It provides
	primitives to suspend and resume a thread. Code to interrupt
	still missing.

	* mono-threads-mach.c: Darwin backend for mono-threads.

[asp.net] Fix for bug #685267. ClientScriptManager generates correct post-back event reference for cross-page post-backs.

	* class.c (mono_class_is_assignable_from): Check the constraints
	of two (M)VARs to see if one is assignable to the other. This is
	needed when we want to check something like:

	Foo<T,U> () where T : U

	On the above example T is assignable to U.

	Fixes #687269

These are required for moonlight.

The Silverlight SDK assemblies rely on this behaviour as do the new tests.

IVT for System.ServiceModel.