* Sanitize slideshows
* Graciously accept URLs missing a protocol
* return false; on extra fields save and open so that you don't wind up at the top of the page
* Escape URLs
* Added apos.sanitizeUrl, which doesn't do any enforcement yet (i.e. it doesn't reject javascript: URLs), but does do a nice job with adding missing protocols and makes sure URLs are at least strings