Add restart icon
Make it possible again to run the front-end in dev mode, by providing a way to invoke sandstorm-supervisor via IPC.
Merge branch 'master' of github.com:sandstorm-io/sandstorm
Fix bug where restarting the server (e.g. after update) would fail when not running as root.
Add restart grain functionality
Merge pull request #38 from jparyani/restart-grain-button

Add a restart grain button
Merge branch 'master' of github.com:sandstorm-io/sandstorm
Tweak button titles to avoid the word 'grain' in end-user-facing text.
Really fix updates when not running as root.

The problem is, Linux capabilities are not inherited through exec() unless either:
a) A special attribute is set on the executable file which states that it is allowed to inherit capabilities. This attribute can only be set by root, which makes it useless to us.
b) The process's UID is, numerically, zero.

Previously, in our UID namespace, we did not remap our UID to zero. Therefore, when exec()ing the new binary after an update, all capabilities to the UID namespace were lost. This means the newly-updated Sandstorm no longer had the ability to set up a new mount namespace, etc. It could create a new user namespace to solve this, but the nesting would just get deeper with every update, which would be bad.

So now we remap ourselves to zero, and it all works.

Reminder: Linux/POSIX capabilities are not object capabilities and are therefore nothing like Sandstorm/Cap'n Proto capabilities. Linux/POSIX capabilities are one of the worst-designed security mechanisms I've ever had to deal with. They are literally worse than useless:
* Nearly every Linux capability can be used somehow to escalate yourself to root, so they provide no actual security benefit vs. the old-fashion superuser approach
* The rules around Linux capabilities, especially inheritance, are nearly impossible to use usefully. Unless you are root, it's practically impossible to actually hold on to a capability and usefully use it, because no one actually sets the proper file attributes, so merely exec'ing a program drops your capability set.
* Linux capabilities are ridiculously overcomplicated and the cognitive load they create wastes a lot of developer time.

PS. Here's a fun link to Andy complaining about Linux capability inheritance some time ago:
  https://lkml.org/lkml/2012/12/1/189
Turn on some extra security features when running bundle in UID namespace.

Since we're now running with UID = 0 (albeit in a UID namespace), the system may sometimes decide to give us back capabilities that we don't want. Various prctls can be used to prevent this in different ways. Enable all of them.
Fix typo in openSession

Fixes problem with permissions
Merge pull request #41 from jparyani/typo-openSession-permissions

Fix typo in openSession
Fix if user has no address or name in getUserAddress
Merge pull request #39 from jparyani/fix-getuseraddress

Fix if user has no email address
Work around issue where Meteor's bundled npm prefers the system gyp over its own bundled version, but the system gyp doesn't work.
Merge branch 'master' of github.com:sandstorm-io/sandstorm
Update app list.
Fix copy-pasto.
add forwarding of Host header to nginx example config
Merge pull request #43 from dwrensha/proxy-set-header-host

add forwarding of Host header to nginx example config