Merge pull request #56 from tvlooy/master

security config
Merge pull request #57 from tvlooy/master

Fix permissions
Merge pull request #58 from tvlooy/master

Fix: optimize wishlist update mails
Merge pull request #60 from tvlooy/master

Fix: don't touch wishlist if user entered html links
Merge pull request #61 from tvlooy/master

Fix #42: can't cascade because entries are in a loop of course
Merge pull request #62 from tvlooy/master

we don't have migrations yet, just schema update atm