Remove the extra "a" from "We are sorry, this is taking a longer than it should."

execute postinstall.js using node

Low risk, does not affect stage/prod, only ephemeral instances. Ran on an ephemeral instance everything operated as expected.

r+

close #2359

fixes #2359

When "primary" addresses (which come from browserid-aware IdPs) are
associated with a Persona account, users can perform certain
operations (including add_email) with a primary-backed assertion. This
changes primary.verifyAssertion(), which checks such assertions, to make
sure their .issuer field is actually allowed to speak for the address in
question.

delegatesAuthority() was taught about proxyIDPs and g_shim_cache. This
shouldn't affect normal operations (which never have g_shim_cache), but
allows proxy-idp-test.js to pass. A pre-existing bug (which ran the
callback multiple times) was fixed too, to keep bigtent from breaking.

A unit test was added, exercising /wsapi/add_email_with_assertion. This
works by creating a cert (signed by one domain), and certifying a
principal at an unrelated domain. Anyone who accepts certs should reject
this.

Allow site-templates.js and templates.js to be requested on ephemeral instances but not on stage or prod.

Allow site-templates.js and templates.js to be requested on ephemeral instances but not on stage or prod.

pre-process cachify in templates

r+ - I dig this. Very nicely done @seanmonstar, the entire approach to getting cachify to work on the frontend is solid. You have done some awesomeness to consolidate code paths and make our development branch work more like our production branch.

close #2502

Clean up dead code in `tests/`

r+

Thanks for the cleanup @zaach!

Issue 2515 fixup absolute path

close #2515

* Further use of the testExpectGetFailure, testExpectGetSuccess, testRelativeURLNotAllowed and testMustBeAbsolutePath

Disallow "/" for:
* siteLogo
* termsOfService
* privacyPolicy

removing gobbledygook symlink

Travis is happy. scripts/test_frontend is happy. scripts/test_backend is happy. I'm happy. @seanmonstar is happy.

r+ merging.

adding jshintrc files

r+

Thanks for finally taking the time to fix this jankiness.

close #2478

fixupAbsolutePath: filter out scheme-relative URLs

The current check to ensure that only absolute paths are accepted
fails to take into account scheme-relative URLs like "//foo.com".

These URLs end up in fixupURL and get the origin prepended to them
to something like "https://origin.example.com//foo.com", which is
invalid but still follows our same-origin restrictions.

So the solution is to require that the character after the leading
slash be anything but a slash.

3 jshintrc files, because of different environments:

1. node
2. browser
3. browser tests

changelog should refer to "current train" until a train is cut, remove c...

Fix IE failing when authenticating with IdP from main site's /signin

Issue 2484 api usage kpi

Issue 2309 forgot js disabled

* /forgot
* /verify_email_address
* /add_email_address
* /reset_password
* /confirm

Fix IE8 showing the red line on the signin page.

symlink no worky on Windows, so make a copy
at postinstall instead

changelog should refer to "current train" until a train is cut, remove changelog snippets stuff - issue #2378

Change the default language from en-US to en

Thanks @mathjazz - merging and closing.

close #1863

Pre-compile client-side EJS templates

r+ Nice work @seanmonstar, this is hot!

close #2394

add missing placeholder on INSERT statement for adding test users

Add partial support to client side templates.

No longer use the email address as an element ID.

Remove HTML comments from compiled templates