* bump from 3.4.2 to 3.4.6
* mostly fixes (including security)

Tuleap: #62
Change-Id: Ibe0e44e91f5cc7d9bb102aa9af9fed03c65f5754