Fixes #4114: Added Security::generateRandomHexKey(), used it for various tokens and default key generation

[ci skip]

Fixes #1452: Added `Module::getInstance()` to allow accessing the module instance from anywhere within the module

fixes #3899

Convert string values to floating point, so that `number_format` method can properly format values.

Fixes #3687: Default `sourceLanguage` and `language` are now `en-US` in order for i18n formatter to work correctly

Fixes #3716: `DynamicModel::validateData()` does not call `validate()` if the `$rules` parameter is empty

Fixed the bug that requesting protected or private action methods would cause 500 error instead of 404