(loadgen) fix console output at startup - properly message # of pre-created users or users to be created via API

plumb in middleware to send request logs to statsd

wait for onload to fix FF home issue - and maybe even the android with no default browser setup issue - #595

read NODE_EXTRA_CONFIG after we setup g_configs.test_*

(loadgen) add '-l' option to list activites, and '-a' option to specify a list of activites to run (ignoring others).  simplify '-o' so all this stuff uses the same mechanism

* Change the text from "use another" to "use another email address"
* Make the link bold so that it stands out.

issue #623

* Stop propagation of the event so that the event is not captured higher up.
* If logout fails, print an error message

close #666.
issue #630.

(loadgen) include-only activity properly returns errors accoring to new error conventions (undefined means success)

* Replace all the input[type=submit] with buttons so that we can set the line-height.
* Use common CSS between all buttons.

close #658

* When setting the text of the email address, use dom.setInner.
* Update the test to use .val() for the check.

close #657

* Remove the common css from style.css and popup.css, place here.
* Update includes list, build script.
* Fixes inconsistency in button capitalization text between dialog and main site.

close #655
close #578

close #654

close #533

close #652

Removing openajax.js, adding hub.js

issue #650

close #650

more issue #598 - add test and fix for other places where exceptions leak out of JWCrypto and cause 500 errors rather than 200 failure responses.

create a test which reveals that the verifier considers assertions that have expired to still be valid (with expiry upto two minutes in the past)

tests to reproduce and fixes for wildy invalid assertions posted to the verifier.  closes #598 and closes #605

certs issued by anyone other than the verifier should fail until primary support is implemented.  closes #645

add a (failing) verifier test of an assertion signed by a cert issued by someone other than the trusted domain.