Adapted from #1375 by @daniel-beck: omitting change to User construction, and adding test.
(cherry picked from commit 088edabb)

Conflicts:
	changelog.html

Adapted from #1375 by @daniel-beck: omitting change to User construction, and adding test.

[FIXED JENKINS-24358] RunSaveableReference.get can acquire locks, so avoid calling it while holding a lock on ourselves.

Added no-store to the Cache-Contorl header

Reference: http://stackoverflow.com/questions/866822/why-both-no-cache-and-no-store-should-be-used-in-http-response
Reference: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.2

Integrated new dom4j

Integrated a bridge-method-injector that rebuilds the constant pool from
scratch.

Integrated remoting.jar that fixes the problem