Prevent possible XSS in reset_password.
Merge.
Make display chunk size configurable in universe.  Defaults to 64k.
Merge.
Clean up config.py (pep8, imports, misc).
use galaxy.util.json rather than json from the python libraries
Add new install_python_environment installation tag to the Tool Shed.

It can be used like the following example:

    <action type="setup_python_environment">
        <repository name="package_python_2_7" owner="iuc">
           <package name="python" version="2.7" />
        </repository>
        <!-- allow downloading and installing an Python package from https://pypi.org/ -->
        <package>https://pypi.python.org/packages/source/d/deepTools/deepTools-1.5.8.tar.gz</package>
        <package>kMer-0.2.0.tar.gz</package>
    </action>

Currently, you can specify one URL to a tarball or a name to a locally shiped tarball.
Important: The underlying easy_install will skip all dependencies. The Tool Author need to specify every dependency explicitly.

Test repository can be found on the Test Tool Shed:
https://testtoolshed.g2.bx.psu.edu/view/bgruening/test_repository_setup_python_environment
https://testtoolshed.g2.bx.psu.edu/view/bgruening/test_repository_setup_python_environment_with_python3
Spelling fix in method name.
Allow discovered datasets to use input data format in 'ext' definition.
With that PR the Tool Shed will be able to get checksums from the Tool Developer.
These checksums will be verified after download and in case of an mismatch an error is thrown.

Currently, md5 and sha256 checksums are supported.
Example:
<package>https://pypi.python.org/packages/source/k/khmer/khmer-1.0.tar.gz#md5=b60639a8b2939836f66495b9a88df757</package>
spelling fix
changed import to explicitly import galaxy.util.json based on code review
Fix: Allow editing workflows on the fly for radio buttons too.

See https://bitbucket.org/galaxy/galaxy-central/pull-request/301/add-ability-to-edit-workflows-on-the-go/diff#comment-2285580
Make hidden_html local
Remove console log
Docker - Extract helper method defining prefix for Docker CLIs.
Docker - Explicitly search for and pull images (if needed) prior to use.
This should prevent successful docker caching from interfering with job outputs on the first execution of tools.

This needs to be better - the output should be capture in such a way that admins can view but it doesn't interfer with the job and there should be an option to cache on the handler (instead of in the job) - for shared clusters without web access.
Expose OutputParameterJSONTool (tool_type='output_parameter_json') for direct usage. Previously used as inherited by data source and data manager tools.
Fix seconds_to_str().
Remove deprecated "data admin" code, since the functionality was implemented better with Dan's data manager framework.