(cherry picked from commit 1fb2acfd)

Conflicts:

	core/src/main/java/hudson/model/AbstractProject.java
	core/src/main/java/hudson/model/ParametersDefinitionProperty.java

- Use the proper block cipher mode.
  Or else the information about the plain text still ends up revealing as a pattern without the attacker knowing the key.
- No need to hide SLAVE_SECRET from the encrypted payload.
  jnlpMac is needed to decrypt this payload to begin with, so there's no point in hiding it. This simplifies the code a little bit.
- Using a newer slave installer that uses the -secret option
(cherry picked from commit f4496df1)

Jesse's original patch
(cherry picked from commit 01a24e2c)

translation cleanup

purged duplicated translations for GlobalCrumbIssuerConfiguration
("Prevent Cross Site Request Forgery exploits").
Changed property name "Crumb" to "Crumbs" because this is the value that the existing translations actually use.

Improve UpdateSiteTest by adding valid Update sites

Removing old static field, which was not friendly to tests, especially multithreaded runners.
Cleaned up existing tests to use updateDirectly rather than POSTing raw JSON.

[JENKINS-15156] AbstractProject.builds accessed by Maven & matrix module builds before onLoad or onCreatedFromScratch called.
Seem to need to keep the deprecated no-arg RunMap initializer though it is unclear to me how it could work.

so iterate on itemGroup.getItems and filter by job names

used to browse workspace and run scm polling

Seems that the RunMap must be initialized before updateTransientActions, which uses it, is called.

[FIXED JENKINS-15156] Initialize AbstractLazyLoadRunMap.dir for newly created jobs.

Correctly support direct updates of html update sites 

Correctly support direct updates of html update sites and other issues pointed out by jglick in https://github.com/jenkinsci/jenkins/pull/692

translation cleanup

API for updating update sites programatically

removed dislocated messages defined in GlobalSecurityConfiguration,
added LOADING messages to GlobalSecurityConfiguration

(Method actually introduced in 1.461, but was wrong—corrected in 1.462.)