Add os.path.expanduser call to normalize_path.

realpath by itself won't expand tildes, which could lead to things like:

pip wheel --wheel-path=~/wheels -r requirements.txt

Producing:

Destination directory: /home/foo/src/dir/~/wheels

Which is pretty much never what you wanted.
merge from release-1.4 branch
merge from release-1.4 branch
merge from release-1.4 branch
Versioned commands consistent with python.

Fixes #1050
Fix functional test.
Default to disallowing external and insecurely hosted files
Fix tests with the new defaults
Merge pull request #1053 from pnasrat/1050-pep439-versioned-commands

Versioned commands consistent with python.
Merge pull request #1055 from pypa/default-externals-to-off

Default to disallowing external and insecurely hosted files
Merge pull request #1028 from emonty/develop

Add os.path.expanduser call to normalize_path.
merge from release-1.4 branch
Merge branch 'release-1.4' into develop
Merge branch 'release-1.4' into develop

Conflicts:
	pip/__init__.py
Don't ignore already installed pre-releases
Merge pull request #1075 from dstufft/always-consider-installed

Don't ignore already installed pre-releases
Test the new branch name
setup.py: dropped claim of python 2.5 support

The changelog for pip 1.4 claims that python 2.5 is no longer supported.
Merge pull request #1088 from garrison/patch-1

setup.py: dropped claim of python 2.5 support
Remove direct support for PEP381 Mirrors

* PEP381 Mirroring support was never fully implemented leaving
  users of it trivially exploitable to a MITM or malicious mirror
  operator.
* 2 out of 6 of the mirrors have been removed from the pool and
  will never resolve.
* The remaining mirrors often fall behind
* The mirrors will likely never be available under HTTPS
* People who wish to use a mirror of PyPI can still do so by
  manually specifying a mirror url for --index-url or
  --extra-index-url which is more flexible, allowing for
  mirrors to be hosted under any domain.