when not logged in, show comment box but disabled
embed timestamp in password reset token, only work for 24 hours
rails 4.0.5 for CVE-2014-0130
when not logged in, show comment box but disabled
mention that moderators can see invitation emails
add a flat version of the user tree, ordered by karma
grammar
story edit: always show merge field for moderators
markdown help: mention backticks
Story: experiment with making comment counts affect hotness
as noted earlier, URI.parse is not very lenient

trying to use it in Story#domain but not in validate can ruin things
bingbot is a bot too
only show comment downvote summary if its total score is <= 0

when a comment has a few upvotes and one downvote, users tend to
focus too much on the one downvote and edit or reply and debate the
downvote.  if more upvoted than downvoted, don't discourage the user
by pointing out the haters
Search: escape " when sending to sphinx
tag pages should be ordered by created_at, not hotness
fade out downvoted comments less dramatically
Sponge: keep user-supplied headers separate

when doing redirections, continue with the user-supplied headers,
not the ones we've been accumulating

fixes the problem of sending the wrong Host header to a redirection
change story downvoting to be called "flag", but still count as a downvote

been in production for a while
Story: return true from recalculate_all_hotnesses!

this is usually called from the console, and true is better than a
giant array of every Story object
for direct-comment links, just use an anchor instead of js to scroll

closes #156