LTRIM support for redis
LTRIM support for mongo
closes #1901
you're now logged out server-side when you're banned, so csrf token doesn't work in app.logout
closed #1910
closed #1850
Merge remote-tracking branch 'origin/master' into notification-fix