Merged from 2.10 branch - Collector #2320: HTTPResponse setHeader lowercased keys but getHeader did not, causing lookups of 'Content-Type' to fail

Support for using zopectl on Windows has been added. All commands are supported and there are two Windows specific ones: install and remove, which install or remove the Windows service. The start, stop and restart commands handle the Windows service.

Fix DateIndex date display; unpack stored integers into something meaningful. This fixes Collector #2316.

Fix potential bug in requestmethod where you cannot specify None for a keyword argument where None is not the default

http://www.zope.org/Collectors/Zope/2308.

Collector #2300: delimit *all* headers with CRLF; accumulated_headers and appendHeader use \n for delimeters and never get corrected on output

headers of plain html files served from Zope3 resource directories.

Also cleanup whitespace in CHANGES.txt.

not send the expected copy/move events.

Note: Tests live in OFS.tests.

- Add a request method decorator to AccessControl, creating decorators that limit a method to one request method only.
- Protect various security-setting-mutators with a POST-only decorator.

Add a 'method' key to the HTTPRequest.other, containing the uppercased REQUEST_METHOD. This makes HTTPRequest a little bit more compatible with Zope3 IHTTPRequest.

Use a decorator to save and restore thread-local state.