Don't allow unauthorized users to do certain actions.
Fixes #641
Only show providers on profile if any are configured.
Changed unauthorized to forbidden
fixed #645 - prevent social unlink if only one linked
Made fixes to auth.
- Don't add duplicates (fixed memory repository)
- Updated WorldDomination nancy package so twitter isn't always
  asking to authorize.
Support svg images.
If the country and note isn't set, use a "-".
Fixed #648
Remove user.Identities from ProfilePageViewModel.
Updated form fields on change password form.
Don't allow logging in as another user if identity already linked.
enable alert-style messages through session
removing unused using
Added error message for already linked account case.
Post to change password if user has a password, otherwise support add password.
Support adding password to existing social only accounts and allow changing pwd
- Validation needs some work.
Fixes #647
make change password vs add password a little cleaner
Add clearfix for nerddinner content provider to ensure contentbox has height and surrounds map etc

Signed-off-by: cmaish <mail@christophermaish.com>
Fix for audio URIs to prevent onerror javascript being introduced via percent encoding.

Signed-off-by: cmaish <mail@christophermaish.com>
Fix for collapsible content windows (eg images) to prevent javascript being introduced via percent encoding.

Signed-off-by: cmaish <mail@christophermaish.com>
Prevent urls containing " from being dropped directly into anchors on the page.

Signed-off-by: cmaish <mail@christophermaish.com>