Add stuff to History.md.
Glasser's comments on restrictCreationByEmailDomain in Accounts
Remove $'s in selector when upserting new minimongo doc.

Plus test for it.
Fix collection driver upsert callbacks.

Run a bunch of upsert tests on the direct collections (LocalCollection and
MongoConnection). Revealed a weirdness with MongoConnection.upsert(); if there
is no id from the selector or modifier, then mongo ends up generating one and we
don't return it.
Only use mongoOpts when passed into mongo API
Add comment about doing real upsert for mongo id generation
Override docs release temporarily
Rename BrowserPolicy framing functions.

Orient them around the default policy, which is app can be framed by any origin.
Separate browser policy functions into two packages.

* browser-policy uses browser-policy-framing and browser-policy-content, both of
  which set default policies when they are used. This way you get a default
  policy when you add a browser policy package, but you can pick and choose
  different packages if you only want to think about one of them.
* The two packages use different namespaces: BrowserPolicy.framing and
  BrowserPolicy.content, which meant some functions got renamed (e.g. not using
  "framing" or "content in the function name when it's already in the
  namespace).
Cache csp instead of constructing it each request.
Actually save csp in cachedCsp.

Also rename ensureDirective to prepareForCspDirective to make it clearer that it
clears cachedCsp.
Tweak browser-policy-framing docs
Move meteor_runtime_config.js pathname check first
Merge branch 'browser-policy-tweaks' into devel
tweak History.md
Add USE_JSESSIONID environment variable to turn on jsessionid in sockjs.
Yet another Node version bump: to 0.10.20. Fixes tls read bug.
Upgrade lots of dev bundle NPM modules.

Needs a license review.
Upgrade lots of package Npm dependencies.
http-proxy is called http-proxy again.