fixes things

@brandonsavage r?

What this fixes:

1. local settings always ignored
2. django-auth-ldap part of vendor-local properly
3. added a doctype
4. a better tab switcher that isn't fragile