Add csrf-lite module
Protect against CSRF attacks
Better error logging

Logging the domain/emitter to bunyan spams the terminal too roughly
upgrade to csrf-lite 0.0.2
Updated package.json with new csrf-lite version

`npm install` was overwriting the checked in version of csrf-lite
marked@0.2.8
update several deps, and dedupe
Don't allow profiles without email addresses

A recent couchdb update clubbed the VDU on _users design doc,
so just guard against that happening in the future.
browse: Escape user input
upgrade everything
Fixed header and footer paging links for recent-authors
Link to user's starred packages on profile

Previously you would only see a link to a user's starred packages
if the user had > 20 starred. We should link to this regardless
to point out that the page is there (I didn't even know about it
until I starred > 20 packages.
Move npmlog to top level

Prevents getting the wrong loglevel in npm-registry-client
Modify redis.conf to work with Redis > 2.4

Virtual Memory is deprecated now and throws an error at startup. To
handle it, the vm-swap-file option was removed.

Reference:  http://redis.io/topics/virtual-memory
Tested and worked with: Redis server v=2.6.9 sha=00000000:0 malloc=libc
bits=64
tag balancing and indentation on package-page.ejs
Add package homepage to package page.
don't expose csrf token to google
Throw 404 in case of an unpublished module - fix #271
Show license on app page, fixes #254
Add some AUTHORS