Prevent policy page date from wrapping mid-line.
js.py: Handle languages for which translations do not exist.

This helps when testing language subdomains that aren't translated
locally.
Remove dead client side cnameframe parameter.

Thanks to /u/largenocream for reporting this.
multis: Add missing VModhash to PUT_multi_description.

Thanks to /u/largenocream for reporting this.
password reset: Validate token before affecting user session.

Thanks to /u/largenocream for reporting this.
Blanket X-Frame-Options: SAMEORIGIN policy.

Thanks to /u/saurabh_nemade for bringing a content extraction redressing
technique to our attention.
toolbar: Match reddit subdomains due to framing restrictions.
toolbar: Add 'allow-same-origin' to fix AJAX within frames.
toolbar: Fix frame sizing with comments pane open.

Since iframes are "replaced elements" they don't auto fill space when a
left and right absolute position is specified. The hacky solution is to
add a container <div> which we can size appropriately and then fill with
the <iframe>.
Use HTTPS for password reset emails.