merge fix for issue #2629 into train-2012.10.12: fix winchan to allow others to use postMessage without breaking (specifically, drop messages which are not properly formed 'initial request' messages from our spawner)

Update config/l10n-prod.json

Remove bg

fix email delivery in train-2012.10.12

add public_static_url configuration default to static.login.persona.org

we throw Errors here, nothing else

give us stack traces!

upgrade connect-cachify to 0.0.11

Corrects the source order on the label/input password fields

Move cachify setup before views are executed

Hides edit_password_form from screen readers when visually hidden

Replace the global variables that were used like instance variables with proper instance variables.

Issue 2561 internal api logout

remove dialog.js->getVerifiedEmail, it is no longer used.

remove the transitional code

removes globals variables

fixes #2563

Remove the extra "a" from "We are sorry, this is taking a longer than it should."

execute postinstall.js using node

Low risk, does not affect stage/prod, only ephemeral instances. Ran on an ephemeral instance everything operated as expected.

r+

close #2359

fixes #2359

When "primary" addresses (which come from browserid-aware IdPs) are
associated with a Persona account, users can perform certain
operations (including add_email) with a primary-backed assertion. This
changes primary.verifyAssertion(), which checks such assertions, to make
sure their .issuer field is actually allowed to speak for the address in
question.

delegatesAuthority() was taught about proxyIDPs and g_shim_cache. This
shouldn't affect normal operations (which never have g_shim_cache), but
allows proxy-idp-test.js to pass. A pre-existing bug (which ran the
callback multiple times) was fixed too, to keep bigtent from breaking.

A unit test was added, exercising /wsapi/add_email_with_assertion. This
works by creating a cert (signed by one domain), and certifying a
principal at an unrelated domain. Anyone who accepts certs should reject
this.

Allow site-templates.js and templates.js to be requested on ephemeral instances but not on stage or prod.

Allow site-templates.js and templates.js to be requested on ephemeral instances but not on stage or prod.

pre-process cachify in templates

r+ - I dig this. Very nicely done @seanmonstar, the entire approach to getting cachify to work on the frontend is solid. You have done some awesomeness to consolidate code paths and make our development branch work more like our production branch.

close #2502