Escaping user-controlled data in templates
More user data escaping
Quick fix to give 500 instead of timing out
Quick fix: normalize assertions on upload
Quick fix: migration to clear out bad badges
Renamed a variable in new migration to read better
Fix non-normalized badge bodies instead of deleting them
Explaining migration match condition:
  really want to match badges where body.badge is a url,
  currently matching where body.badge is not an object which
  seems to be the only valid form we store in the DB.

  Also, triggering travis.
Merge pull request #799 from stenington/sanitize

[WIP] Sanitize user data
Fix escaping issues
Changing broken badge migration back to removal instead of reparation.

Removal has fewer edge cases, and users wouldn't have known that the upload
of the bad badges has succeeded at all.
Merge pull request #838 from stenington/828-broken-upload

Fix for broken badge upload
Merge pull request #843 from toolness/development

Substitute middleware.testUser() with lib/browserid.js stubbing.