Bad comment form link

Also some missing changes from the #505 sequence
fix #507
remove the html suffix from encrypted cachefile names
Explain #509 with a title hint
#496
Merge remote-tracking branch 'origin/master' into 1.4.6