Merge pull request #84 from dolanjs/master

apparmor tweaks
version bump to 0.2development
Remove all instances of HMAC_SECRET

Unit tests continue to pass, which confirms this variable was not being used.
Merge pull request #90 from garrettr/remove-hmac-secret

Remove all instances of HMAC_SECRET
improve Mac OSX instructions
Merge pull request #97 from msjoinder/help_mac_users

improve Mac OSX instructions
test for codename regeneration

The single quotes in the "regenerate-form" form were changed to double quotes
due to a bug in paste. While using single quotes is valid for values of HTML
attributes, paste does not parse them correctly and as such cannot modify
fields or submit the form.
remove javascript

unit test passes, so the "regenerate codeword" functionality is still intact.
Add links to live demo sites
Merge branch 'feature-remove-javascript' of https://github.com/garrettr/securedrop
Replace userid with fingerprint in HACKING.md

We remove spaces in the key identifier in crypto.py,
so using the gpg userid as the key identifier instead of
the fingerprint won't work. See
https://github.com/freedomofpress/securedrop/issues/96.
Upgrade PyCrypto to to 2.6.1

PyCrypto 2.6.1 fixes a potentially serious issue in the CSPRNG [0].

If you already have your dev environment set up, you can simply `pip install -U
pycrypto`.

[0] http://lists.dlitz.net/pipermail/pycrypto/2013q4/000702.html
Only generate valid-length codewords

This prevents potential DoS through requesting the server to generate enormous
codewords, first reported here [0].

[0] https://github.com/freedomofpress/securedrop/issues/4#issuecomment-27372878
Remove unused gen_ajax function and url rule
source document is now encrypting to zip file to perserve contained filename
manually specifying filename in gpg flag no longer necessary
new filenames should be recognizable as valid and downloadable from defined endpoints
Merge pull request #113 from Hainish/feature/issue80

Feature/issue80
fixing unit tests related to issue 80 fix
Add top-level HACKING doc with contact info