Correct view traversal security checks

favor of the "classic" './configure && make && make install' recipe.

Fixed refactored traversal on bound methods of classes with no default
access.

        reasons

OFS Image: Image and File updated to use isinstance(data, str) and raises TypeError upon encountering unicode objects.

OFS Image: Image and File now both support simple unicode objects for data (they function the same as strings for data).

           1. Unacquired attributes
           2. Views
           3. Acquired attributes
        According to consensus in z3-five mailing list:
        http://codespeak.net/pipermail/z3-five/2006q2/001474.html

      - The defaultView directive now only looks up views, not attributes.

Fixed edge case of attribute name ''.

Fixes http://www.zope.org/Collectors/Zope/2109

Use custom Provider expression from Five instead of the Zope 3 one which doesn't do acquisition wrapping.

        in ZServer/HTTPServer

        in ZServer/HTTPServer

        locale related comparison methods

  Empty TALES path expressions are allowed in Zope 2.
  http://www.zope.org/Collectors/Zope/2118

(e.g. python expressions)