fix fragile static resources tests that verify locale substitution works properly based on the present resource deps and the order which they occur in static_resources.js - broken with the move off jquery

(test fix) when checking that certificate duration is correct based on 'ephemeral' argument to cert_key api, allow a 200ms window to account for a small elapsed time between setting of iat and exp - which occurs on a system under load or slower virtualized environments (like travisci)

API changes for public terminals/shared computers, and update all tests
to post data using JSON rather than form encoding, as the front end now does.

Adding unit test to demonstrate x-frame-options value for iframed and non-iframed content, after a 304

implement and test the prolong_session wsapi - which extends the duration of an existing session from the ephemeral duration (an hour) to full authentication session length (2 weeks) - doesn not change the start time of the session, so is a noop when invoked multiple times.  to be added to frontend code once user acknoledges ownership of device.

update cache header tests because etagify lazy calculates content hashes for etag headers, see comment in commit contents

update cache header tests because etagify lazy calculates content hashes for etag headers, see comment in commit contents

add a ping wsapi that's registered on all daemons and does a light weight test of database health - closes #1324

fix unit tests - autenticate_user and cert_key now require a boolean 'ephemeral' value which will affect duration of authentication and certificate validity respectively.

Conflicts:

	lib/primary.js

rewrite compress scripts in javascript: better output, build of resources only when needed, uses multiple    cores, and leverages the same resource lists as cachify so we only express what dev resources go into what prod resources once #DRY.  closes #1009 closes #660

fix unit tests when run under travis-ci - when we want address_info to not detect primary support, we should use a domain name that will never offer primary support - issue #1197

improve documentation of mysql wrapper and associated tests, remove debug console output, fail slow queries rather than retrying, and add a statsd counter for failed_query

fix unit tests failing under travis-ci: for verifier tests, use impossible domain names for bogus resources that are never supposed to exist. closes #1197

  * all database functions return an err as the first param which is non-null for failure.
  * all wsapis handle database errors and return service unavailable to client.
  * stalled-mysql-test implements unit tests to verify proper failure behavior of all wsapis.
  * configuration parameter added to define max allowed time per query

 /test now redirects to /test/ so that you can hit either url to run front end unit tests.  fixes backend unit tests. closes #1178

* Add a new view, cookies_disabled - this is displayed to browsers that do not allow access to localStorage when cookies are disabled (Firefox, Chrome, Fennec)
* Add localStorage check in include.js to check for browsers that do not allow write access to localStorage.
* Add a Javascript cookie check in network.js->cookiesEnabled using a test cookie with duration of 1 second so it is never sent to the server.
* Remove the old cookies_enabled check that was theorized to come from session_context - remove this from the XHR mock as well.

issue #835

vary session cookie name by public_url when public_url is not browserid.org - this addresses issues which affect testing with IE when cookies are set for both, diresworb.org and dev.diresworb.org.  closes #296.

update wsapi to return a body of 'Bad Request: no cookie' when a CSRF check fails because no cookie was sent from the client - issue #835, issue #1056

serve all views with cache headers requiring revalidation, varying by accept-locale, and *only* with an ETag but not last-modified (the two don't mix well, see rfc2616.  issue #620

* include.js points to include_js/include.js or production/include.js depending on environment.
* Added tests checking for correct responses to 'include.js' and 'include.orig.js'.
* Added missing tests for correct response for '/test' and '/test/'
* Remove the symlink to include.js
* Remove symlink update in compress.sh

issue #921

cache busting: add 'enable_code_version' configuration - when true return 'code_version' in session_context - also /production/XXX_vYYY.{js,css} calls now map back to /production/XXX.{js,css} - issue #226

add version.js - a small abstraction which extracts a 7char abbrev sha from the current source - issue #226

update wsapi_client to return errors in the standard node convention.  update all clients.  fix several areas in loadgen where we were not properly handling errors.  improve informational output of loadgen failures.  closes #838 - helps with issue #784 - closes #785

updated crazy verifier test to chop off last 2 chars from assertion rather than 1, due to base64 resilience that is not worth testing. Fixes #833

update all WSAPIs now that userid rather than email is stored in session after auth.  all tests pass on JSON database driver