close #200

close #195.

Change the csrf response type to 'html'.

This makes sure that the non-XML response is parsed correctly and jQuery does not throw an error.

Fixing a problem where new email addresses added to an existing account would not get synced correctly directly after confirmation.

Conflicts:
	browserid/static/js/browserid.js

(load gen) handle case where all users are 'locked' (in use by other activities), fix bug where cb was doubly invoked

remove redundant check that an authenticated user may add a key.  this is performed up at the wsapi level now, so let's save a database query

move wsapi_client.js to libs/ where it can be shared by other code needing a programmatic client to the browserid WSAPI

Ensure req.body exists before trying to use it.

Conflicts:
	browserid/static/dialog/controllers/dialog_controller.js
	browserid/static/dialog/resources/browserid-identities.js
	browserid/static/dialog/resources/browserid-network.js
	browserid/static/dialog/test/qunit/browserid-identities_test.js

Moved the assertion generation into BrowserIDIdentities. Adding tests for this.

Conflicts:
	browserid/static/dialog/controllers/dialog_controller.js