fixed check for site parameter, it should be an origin not a domain, and fixed all tests accordingly. Was careful not to screw up the verifier tests that are testing for old parameters to the verifier.

update changelog and version to include more rigorous checking of email addresses, also update .spec file to copy in l10n-*.json to build directory

Extracting header removal logic to run before etagify middleware

(cache unit tests, issue #1353) check for proper X-Frame-Options headers on initial request as well as 304 response

Adding unit test to demonstrate x-frame-options value for iframed and non-iframed content, after a 304

Cachify CSS while compressing it. Fixes Issue 620

Add the groundwork for browser specific "Enable Cookies" URLs.

* Start with generic Firefox and iOS

issue #1167
issue #1302

Reusing staticPath in compress worker and making prefix configurable, removing DRY violation per llyod

Fix cookiesEnabled being possible to call it's onComplete callback twice if onComplete throws an exception the first time.  closes #1339 - related to issue #1323

Fix cookiesEnabled being possible to call it's onComplete callback twice if onComplete throws an exception the first time.

issue #1339

use etagify for content-based hashes in ETag headers - issue #1331

update cache header tests because etagify lazy calculates content hashes for etag headers, see comment in commit contents

add a ping wsapi that's registered on all daemons and does a light weight test of database health - closes #1324