more flexible for theming
Fix more info form when member logs in #300

* Check against needinfo field in the DB and show form
* Add password field to more info form
* Set needinfo field when creating user without name field
Scheduler: Check and increase max_execution_time if its too low

Related to #928
Scheduler: Add locking mechanism base on using mysql

Prevent multiple schedulers running at once. We create a fake
locking mechanism based on setting a flag in the settings table.

Related to #928
Optimize cleanup scheduler to only load image media type
Adding indexes based on @jetherton's blog post to speed up sql queries

Adding indexes based on this blog post: http://ethertontech.com/2012/09/28/optimizing-ushahidi-for-quick-reads-on-large-datasets/
Most of these are obvious and apply generally. I've skipped
the full text index on form_response since that won't apply to all users.
Fix /reports date filter: make 'All Time' filter work #91

Basically this just allows empty values for the from and to fields.
Allow date filters with only 'from' or 'to' value, not both

* Allow just 1 of from or to filters, don't require both.
* Check filter params are not empty, not just if they're set
  Avoids defaulting to filter by 1970-01-01
Fix CSSmin class name - autoloading is case sensitive. Fixes #1026
Fix CSS url() rewrite when running in a subdirectory. Closes #1027

* Docroot needed to use the actual server docroot, not ushahid/kohana
  docroot.
Correct OSM attribution. Closes #1029
Report total rating for an incident rather than one rating arbitrarily.
Check if pulling from geonames was successful.

Closes #1039
Delete form responses when deleting an incident.
Remove redundant code for reports deleted from admin.

All of this is done in Incident_Model::delete(), including calling the report_delete action.
Allow using http auth to login when a deployment is private mode

* This makes all request allow login via http auth
* Adds Auth::http_auth_login() and Auth::http_auth_prompt_login() to Auth library
Improving tag media API calls

* Fix error thrown when tagging media to an existing report via the API
* Add incident id existence check when tagging a media to an existing incident via the API
* Refactor tag media to make use of inherited method for showing messages
* Switch to using ORM for querying the location id
Only reset session for non-ajax API requests #791

* Avoids log out issues when grabbing things via ajax (ie. checkins)
* But prevents CSRF by resetting the session.
* Stil vulnerable with XSS but they could grab the CSRF token anyway.
Remove duplicated code for HTTP Auth login
Avoid popping login box for ajax requests w/o auth