Handle underscores in subreddit names in roadblocks.
Turn off bucket validation to minimize S3 permissions.

boto attempts to validate the bucket when calling get_bucket by doing a
LIST with zero desired items. By turning off validate we can reduce the
permissions.
Make each of the JS files individually responsible

Make will still only build once
Simplify handling/mangling of should_compile special case.

or: How I Learned to Stop Worrying and Love the Mangling.
Shorten recent clicks cookie to at most 5 elements.
Allow filtering of modactions by deleted users.
traffic: Reinstate averages in weekday summary.

In the previous system, the weekday summary showed the average traffic
for each day-of-week over the day interval range. The new system was
just showing the latest week's data.
Always record trans_id in PromoCampaign things

Gets rid of default values so a data attribute will be saved even when trans_id
is zero. This change will make it possible to query for unpaid campaigns.

Also gets rid of payment state and makes sure the transaction id is preserved
even if the promoted link is rejected because this lets us link the campaign
to the refund in the promo log.
Default end_date in PromotionWeights.bid_history

Makes the behavior match that of PromoteDates.bid_history, which sets the
end_date to today if it's not given as a parameter.

This fixes a bug where the function raised an error if the optional parameter
end_date wasn't provided.
Read from PromoCampaign things.

The code has already been dual-writing to PromoCampaign Things. This change
begins reading from Things while still writing to both Things and the link
attributes in case we need to roll back.
Messages: Set after parameter to oldest visible message.
Make profiling transparent and aggregatable.

If the config variable profile_directory is set, ProfilingMiddleware
will be added to the WSGI stack. The middleware will generate a file in
the specified directory on each request containing the contents of that
request's profile.
reddit_base: Add support for Secure and HTTP-Only cookies.
Add framework for RFC-6238: Time-Based One Time Password Algorithm.

This provides a system for two-factor authentication, using a compliant
OTP-generator such as Google Authenticator. The framework includes a
validator for use on API calls needing authentication as well as a UI
for provisioning/resetting your secret key. A secure cookie may be
generated to effectively turn the user's browser into a temporary
authentication factor.

This feature is currently limited to admins only until full-site SSL is
available.
Require two-factor authentication to enable admin mode.

This feature can be disabled with the new ini setting
`disable_admin_otp`.
tdb_cassandra: Let pycassa serialize timestamp when validated.

Pycassa will do its own marshalling when columns have validators
specified in the C* metadata.  We need to disable our own marshalling
when we know Pycassa will take care of it. This is already taken care of
in the general case, but timestamps are handled somewhat uniquely.
Refactor/rename OAuth2 token model so we can reuse it.

The OAuth2 Cassandra models are a perfect fit for other places in the
app that need randomly generated tokens.
Clean up minor formatting nitpicks in token.py.
Move verification email and password reset tokens into Cassandra.

In memcached there is a chance of the keys being evicted before their
time runs out. We can mitigate this by adding more memcaches, but that
has other downsides (such as increased risk of failure).
Error handling in promote.get_scheduled

Aggressively catches and logs exceptions inside the campaign loop in
get_scheduled. This change will allow make_daily_promotions to skip over
campaigns with corrupt data and still launch the others.

Note: We might want to consider passing the list of errored campaigns
back up to the calling function so they can be handled more noisily there.