[2.3] Always convert Time and DateTime objects to local before converting to string

Logging fix

Finished tests in 13.802571s, 175.1123 tests/s, 728.8497 assertions/s.
2417 tests, 10060 assertions, 0 failures, 0 errors, 76 skips

 19) Failure:
test_log_is_filtered(FilterParamTest) [/Users/burke/github/rails/actionpack/lib/action_controller/base.rb:1317]:
unexpected invocation: #<Mock:Logger>.info('  Parameters: {:foo=>\'not logged\', :bar=>\'logged\', :nested=>{:password=>\'not logged\'}}')
unsatisfied expectations:
- expected exactly once, not yet invoked: #<Mock:Logger>.info('  Parameters: {:foo=>\'[FILTERED]\', :bar=>\'logged\', :nested=>{:password=>\'[FILTERED]\'}}')
satisfied expectations:
- allowed any number of times, invoked once: #<FilterParamController:0x10e8f3658>.logger(any_parameters)
- allowed any number of times, invoked once: #<FilterParamController:0x10e8f3658>.params(any_parameters)

Update vendored tzinfo

Allow false in session

Support custom serialization for Session::CookieStore

CVE-2014-0130 protection

Upstream doesnt support nested hashes having indifferent access, we
should stay consistent. Swap order for returned value in session hash.

Backport for Rails 4 flash hash based on https://github.com/envato/rails_4_session_flash_backport

make sure nil isn't memoized and frozen

We shouldn't try to rescue every type of exception here