SECURITY: correct our CSRF implementation to be much more aggressive
Merge pull request #1258 from elo7/pt_BR

Added pt_BR user.change key value
Merge pull request #1259 from sir-pinecone/hide-admin-group-link-from-staff

hide groups nav link from non-admins
Merge pull request #1260 from sir-pinecone/reactivate-admin-refresh-btn

Fix auto-group refresh response so that ajax callback runs
remove email footer font override

looks hideous to have mismatching body and footer fonts on anything
retina
initial draft of security document
Update SECURITY.md
Added ember-renderspeed library for profiling rendering. Removed old probes stuff that
that was just profiling the run loop.
Remove RawDivView and use regular handlebars
Remove unused PrependPostView
Move deleted at into actions history, where it should be.
Remove an `{{#if}}`
Left in an extra function.
Rename AdminLog to StaffActionLog
add a way to delete posts and topics when deleting a user with UserDestroyer
Add BlockedEmail, to block signups based on email. Track stats of how many times each email address is blocked, and last time it was blocked. Move email validation out of User model and into EmailValidator. Signup form remembers which email addresses have failed and shows validation error on email field.
Add a way to add email to block list when nuking a user
Deleting a user from admin user page has the option to also block signups from the same email address
Add ip_address, email, and context to staff_action_logs table. Context should usually be the url from which the staff member performed the action, but could be any string that describes what the staff member was doing when the action was performed.
Add button to delete a spammer in the flag modal
Add SiteSettings: delete_user_max_age, delete_all_posts_max. Add delete spammer button to admin flags UI
Moderators can delete users too