backend: add session validation check
add feed-icons placeholder index.html
block listing of several util directories; deny access to config.php
rebase translations
Revert "Add new API method: `getFeedStats'"

This reverts commit 0192ffe5a5f8254d723cf46e4bda839220191c2c.
having idiots report error 500 because their server is misconfigured is worse than having config.php wide open in case their php is not working
add support for plugins adding API methods
digest: use proper logging, update.php: fix typo
remove no_cache_incantation()
add cache-control: public to the login page so that firefox would bother making a thumbnail
remove label gradients
decode html entities in article title on import
api: add score to getHeadlines/getArticle