update annotator to 1.2.6-dev-e0acf62

fixes #409
closes #410
minor annotator update 1.2.6-dev-e661e78

smooths last difference between the jquery and pure dom xpath
upgrade to angular v1.1.4
better fix for #405 that doesn't break animation
get XSRF-TOKEN from cookies as a fallback

This is helpful, for example, in an extension setting where newer
versions fo angular don't send the X-XSRF-TOKEN header on CORS
requests. In this case, if the request is with credentials, we
can still get it from the cookie.

Should fix login from the extension.
ensure a csrf token exists even on xhr app

This helps with the extension, where no request to /app for the
HTML content type exists.
Fixes #419
Fixes #418
Fixes #418
remove unnecessary highlight css transition
don't change the highlight text color

fixes double-text on highlights in PDFs
whitespace
take care of in-flight requests on Store reload

fixes #328
remove annotations from root scope after delete

fixes #429
app.scss -> sidebar.scss and keep it out of site

fixes #407
Merge pull request #432 from hypothesis/328-double-annotations

take care of in-flight requests on Store reload
Merge pull request #433 from hypothesis/429-refresh-bucket-on-delete

remove annotations from root scope after delete
Merge pull request #434 from hypothesis/407-site-scroll

app.scss -> sidebar.scss and keep it out of site
move .content responsive css to site.scss

fixes #412
opacify quotation marks