merge with default

--HG--
branch : stable
merge with stable

--HG--
branch : stable
update and fixing test with Haystack >=2.0
initial support for custom user
register auth_user only if it's based on django
update to requirements (using Pillow than PIL that is obsolete. Also added new haystack and security fixes of django)
we are using  context_processor "django.contrib.auth.context_processors.auth"
so in templates request.user - > user
added to setup.py
more pep8 adjustment and also added context to requests
add pytz to setup.py; update whoosh version
user should be get from user.username not __str__
user should be get from user.username not __str__
move openid static to project_static
fix #215: remove links to authopeid from core
Don't return HttpResponseForbidden()

raise PermissionDenied instead, so we don't get blank 403 Forbidden pages.

By raising PermissionDenied, either 403.html from the templates directory will be served, or if it doesn't exist Django will send the default RFC 2616 '403 Forbidden'.

--HG--
branch : 403forbidden
Merged in Krenair/djangobb/403forbidden (pull request #31)

Don't return HttpResponseForbidden()
Merged in Krenair/djangobb/trac-124 (pull request #27)

Don't show categories that the user can't access on the 'Jump to' list
update to urls
merge
back to original views.py