Fix form redirection

Form redirection was broken:

    * If the form success page doesn't have a “from” parameter, the
    success page raises an Error.
    (Fixed with the try...except KeyError)

    * If the “from” parameter is relative, or if it is something
    like '"><img src="'. It raises a NoReverseMatch, because Django
    thinks it's a module, and tries to import it. This could lead to a
    remote code execution if a user succeed to put a __init__.py file in
    the /media/ directory and succeed to import it.
    (Fixed by using HttpResponsePermanentRedirect instead of redirect() )

    * If the “from” parameter is “http://example.com” widgy will
    redirect to example.com, allowing somebody to give links like:
    <http://good.example.com/form/success/?from=http://evil.example.com/>.
    <http://evil.example.com/> can be fully URL encoded in order to
    hide it.
    (Fixed by using is_safe_url)
no more red h2s
fancy demo design
use mezzanine for the demo homepage
FIX: widgy.py was clashing with widgy package
Remove unused import
Add the templates for the demo menu
Merge branch 'demo' into demo-design

Conflicts:
	demo/public/css/common.scss
	demo/public/css/demo.scss
	demo/templates/base.html
	demo/templates/pages/menus/top_nav.html