Update to Node 0.10.18, bumping dev bundle version. Use caronte.
Use npm install --force to get around NPM cache corruption bug.

(This caused test_bundler_npm to fail sporadically with Node 0.8.)
Make sure all packages rebuild.

This isn't quite enough to rebuild NPM packages but it's a start.
Update run.js to use caronte API.
Use an http agent (this was default in old http-proxy but not in caronte).
Track the node version used when installing NPM modules.

This way, when the dev bundle version changes the Node version they will get
reinstalled. (You still need to bump BUILT_BY to get the modules into
unipackages too.)
Might as well use the version that just got released (0.10.19).
Fix .node_version check.  run-tools-tests passes.
Merge branch 'node-0.10' into devel
Update dependencies for madewith package; fixes #1448
Disallow words added after game clock expires.

Fixes #541.
Add XXX to reload package informed by #657
Various wordplay fixes:

 * Don't add blank lines to the dictionary.
 * Fix broken word length check in `score_word`.
 * Prevent event handler from submitting blank words.
Use cryptographic PRNGs when available.

This means node's crypto.randomBytes on the server, and
window.crypto.getRandomValues on the client. If node's crypto.randomBytes throws
an exception, we fall back to crypto.pseudoRandomBytes. If
window.crypto.getRandomValues isn't supported by the browser, we fall back to
the alea generator that we had been using previously.
Merge branch 'csprng' into devel
Add the option to use a hosted domain with google's oauth

The hd option is used to restrict which email domain that are allowed to
log in to your app.

Starting from this commit you can pass `hostedDomain: 'example.com'` to
only allow emails from the domain `example.com`.
Remove random from leaderboard and wordplay .meteor/packages.

It's part of standard-app-packages (though it wasn't added to it
until relatively late in the linker project).
Improve the explanation of manual publisher functions.

Fixes #1018.
Clean up docs for collections managed by remote DDP server.

Fixes #875.
Improve Mongo compatibility with $ne/$nin/$not and arrays.

Fixes #1451.

We currently handle matches where the key has multiple values due to arrays in
the document in two subtley different ways, depending on whether or not the
array is in the last element of the keypath or not. (This is annoyingly
necessary, at least in the current structure of how we compile selectors, due to
various selectors differing in how they treat arrays.) The negative-style
operators have "must match all values" semantics, but this was only being
enforced when the branching was in the last element of the keypath. This commit
semi-hackily applies those semantics for other branching too.

We are still not 100% Mongo compatible (see XXX comment) but it's closer.