Don't mess up the target list in the dashboard

Fixes #390
Fix potential for nastiness in the dashboard

Also clean up the conditional for jsdebug to not duplicate <script>
lines
Update carbon-daemons.rst

update obsolete doc
Changes needed to run without warning using django 1.5.
Fixing importing execute_from_command_line in manage module.
Moving the secret key to local setting file.
Merge pull request #394 from mleinart/django15

Django 1.5 compatibility updates
Merge pull request #396 from 'graphite-server/master'

Changes needed to run graphite-web in django 1.5.x without warnings
Bump to a minimum of Django 1.4
Merge pull request #393 from hvnsweeting/master

Update carbon-daemons.rst
Merge pull request #391 from SEJeff/issue-390

Don't mess up the target list in the dashboard
Merge pull request #392 from SEJeff/fix-dashboard-xss-master

Fix potential for nastiness in the dashboard
Merge pull request #397 from mleinart/events_timezones into 0.9.x

Jerry-rig events to strip timezone before reading from db
Fix unsafe use of pickle.loads
Update Django dependency
fix missing import that breaks cache querying
Add release notes for 0.9.11 and previous
Merged master into master-HPC