Rename ADDON_ICON_SIZES and only generate the ones we need (bug 885329)

(we should probably deprecate 32x32 and 48x48 as well, but that's
 for another bug)
import cleanup
I guess we were using these for imports
Fix XSS through string interpolation (bug 1023594)
prevent cookie-based authentication for the API (bug 987932)
Merge pull request #2223 from diox/stop-generating-useless-icon-sizes

Rename ADDON_ICON_SIZES and only generate the ones we need (bug 885329)
Stop relying on 512x512 icons in webpay_jwt tests (bug 885329)
Merge branch 'master' of https://github.com/mozilla/zamboni
Allow CORS requests for mini manifests