WebAppSec template tweaks.
Merge pull request #225 from mikewest/webappsectweaks

WebAppSec template tweaks.
Make Bikeshed no longer use config.doc at all, so you can sanely just construct a CSSSpec and use it.
Process each Refer line only once.
Add a profile command.
Make the profile output use color more effectively.