Renamed CsrfProtector to CSRFProtector

This conforms to PEP8 better
Merge remote branch 'bengillies/jsonp'
fixed minor PEP8, whitespace and readability issues
release 0.9.46

* modified tiddler creation to default to public instead of private
  NB: Default setting can be customized via chkPrivateMode option.
* added JSONP support (limited to public resources)
* improved error handling for binary uploads
updated JSONP callback handling

latest plugin version uses callback instead of jsonp_callback parameter
Change how app is loaded, and address HOOK function proliferation.

*Currently serve.load_app() is wrapped in app_fn() and passed to
wsgi_intercept. As a result, on every incoming request, tiddlyweb and all its
plugins are reinitialized. This can be avoided by wrapping the
app returned by load_app() (ie. initialized tiddlyweb) in app_fn() instead.

For plugins with storage hooks, reinitialization causes another copy
of the hook function to get added to th HOOKS dict after every request. After
10 requests there will be 10 copies of each hook in the HOOKS dict.

*The HOOKS dict also needs to be cleared before each test module
starts because it persists throughout the whole test session.
cleaned up fixtures module

reordered imports, fixed whitespace
Refactored main StyleSheets and fixed 2 style bugs

There was surplus css in the stylesheets from original theme, these has been removed. 2 style bugs have also been corrected
dont lookup spaces if logged out, copy text changes.

this addresses #503
Merge branch 'master' of git://github.com/TiddlySpace/tiddlyspace into IssueKilling
Binary upload plugin now respects config.options.chkPrivateMode

the message in Backstage.tid reflects this.
this addresses #506
the plugin already takes a bag argument to define where to upload to so
if user really wants to upload to private but not use a private space they
can.
remove deleted draft locally. when mint a draft open original and draft

when creating a draft the ui suggests the tiddler has been overwritten.
This change opens both the draft and the original to make it clear this isn't
the case.

this addresses 455 by controversially using store.deleteTiddler rather
than store.removeTiddler. this is because removeTiddler doesn't have a
callback and in the case of a publish we want to refresh the tiddler in
story and run a custom callback. Hoping adaptor rewrite will make this
code cleaner.
refresh display after deleteTiddler

just noticed that on deleting a draft the display doesn't get
refreshed as it should.
post-merge cleanup

* simplified use of String's format method
* renamed internal shortcut variable for consistency (see previous
  cleanup commits)
* removed unnecessary shortcut variable
* fixed vertical whitespace
Merge remote branch 'colmjude/stylesheetrefactor'
Merge remote branch 'jdlrobson/IssueKilling2'
improved refresh efficiency for publishing commands

using notify instead of brute-force refreshDisplay

in the process, fixed various STYLE issues and updated use of String's
format method
fixed failing test

both Jon and FND deserve a beating for committing and merging,
respectively, changes without running the tests
Merge branch 'master' into jsonp