defaulting on meant that even though it was
an optional dependency, it still blew chunks

also prevents error from require node-statsd if it wasn't installed,
but logs error if config says it should be enabled.

Remove en-US from the SUMO link

Before authenticating, check password length.

localize main site

<%- is an alias for <%=.

Update one unit test so all frontend tests pass.

Add new authentication related KPIs for @nmalkin

close #1825

adorn confirmations on main site (like 'd00d, sure you wanna cancel') with gettext() for proper extraction and substition

'or' was not gettext() decorated in index.ejs - allow a translator more control over the whole phrase

Minimalist implementation of support in core for Proxy IDP (a.k.a. "BigTent")

Fix cookie check cookie made into a session cookie in IE8

log reason for bad verifier assertion and increment statsd failure counter

gettextify the last portion of the about page.

add test coverage of origins that start with digits, and relax validation regex a bit - closes #2042

Cachify the logo as well.

issue #1999

i18n fixes

new regex for matching origins - issue #1981

extensive testing of i18n mechanism - including english fallback, string substition from .json files, and debug locale

new KPIs in the event stream:
* authenticate.enter_password
* authenticate.password_submitted
* authenticate.password_success
* authenticate.password_fail

Added a couple of new testHelper functions, expectedMessage and unexpectedMessage

More verbose instructions for the initial MySQL setup