pathauto 5.x-2.0-beta4

This is primarily a security release in response to the token_values potential Cross Site Scripting issue. Pathauto on its own is not affected, but token values provided by Pathauto were not properly checked and may have caused a problem if used by another module (no known examples exist).

Other Changes since DRUPAL-5--2-0-BETA3:

• #177058 by greggles, provide a warning not to use punctuation in strings to remove field
• #179066 by Rob Loach, incorrect use of links in t() function broke link to admin page
• #179793 by fysa, Increase bulkupdate limit field length from 3 to 4 characters.
• #143831 by greggles and others, punctuation character fixes and a few other random fixes