Added new paragraph keyboard shortcut

`Ctrl / Cmd + Enter` now enters a new paragraph, but only if the user is not on a new line.
Fixes config.example.js

Closes #945
Fix pressing enter key on user settings

Specified type='button' for the buttons in the form so they don't get
pseudo clicked on enter key in inputs.  Added a keyup handler to check
for enter keys in the inputs and do the proper action based on where you
are in the form.
Move webfonts to // rather than http://

https://en.ghost.org/forum/bugs-suggestions/475-suggestion-remove-system-dependence-on-google-web-fonts
Merge pull request #948 from javorszky/0.3.2-wip

Fixes config.example.js
Merge pull request #954 from jgable/fixChangePasswordEnter

Fix pressing enter key on user settings
Merge branch '0.3.2-wip'
adding when/monitor/console
Updated to latest version of express

closes #875
Merge pull request #977 from tgriesser/debugging

Adding when/monitor/console
Updated to latest version of express-hbs

issue #830
Refactored tests

Fixes #362

- There is no need to set the viewport on functional tests anymore
unless something other
than the default of 1280x1024 is desired.
- There is no need to invoke `casper.run` to trigger `test.done`
anymore for functional tests.
- Each test works independently of the rest; registration is handled
once for the lifetime of the test run and then login/logout can be
invoked automatically as desired.
- Mocha tests all utilize predefined, more realistic fixtures when
appropriate.
- Renamed old api tests that were really model tests as appropraite.
- Added example api test for posts.
Merge pull request #983 from gotdibbs/Issue362

Refactored tests
Revert "loading bar implementation"

This reverts commit de6b8ee9b3a8c3ed4f8d78ec972c459eecf7bb76 and 16742bcaef58b37649865b68b5463770a4fa8b12
Added in functionality for a working loading bar
Fix for unhandled promise on fresh db startup

issue #977

- As of the addition of when/monitor/console we now get errors about unhandled promises
- This fixes one which appeared when starting up without a DB
Merge pull request #984 from matthojo/Loading-Bar

Loading bar
Escaping several fields to prevent XSS

issue #938
- escapes post's title field
- escapes settings title, description, email
- escapes user's name field
- includes test for post title
Swapping escape to sanitze

issue #938

- rather than using escape, use node-validatiors santize function which is designed for preventing xss vectors
- added listener for changes to both editor and settings page
- added more sanitization to the user model
- consistently use triple-braces when outputting blog post titles
Updating to latest Casper

- triple braces for post titles everywhere