Added function for escaping query strings and fixed several XSRF vulnerabilities.
fixes #6100 auth_gettoken now works with email address
Merge pull request #6106 from jeabakker/6100-webservices-auth-gettoken

fixes #6100 auth_gettoken now works with email address
Fix inline docs for set_input
Fixes #6177 - refuse to deactive plugins used as dependencies
whitespace fix
move deactivate event registration to the user-triggered action
Refs #6136 - Adds test for elgg_http_url_is_identical
resolved the todo of using elgg_normalize_url in the
http_url_is_identical and also fixing the bug where url2 did not get
site_url prepended
forward to all if no group archive requested
Merge pull request #6151 from jdalsem/patch-9

Forward to list of all group blogs if archive not requested
fixed a unittest I broke in #398
remove thumbnails if no longer needed
changed the bugtracker url from the developers plugin to GitHub
fixed issue when reordering plugins to second last position of other
column that has more than 2 widgets
Merge pull request #6170 from jeabakker/removed-link-to-trac

Removed Trac from developers plugin manifest
replaced all references to trac.elgg.org to the correct GitHub issues
found some more references to trac
Revert "move deactivate event registration to the user-triggered action"

This reverts commit 6da43b70ca0de807c0532adb0bba65405d3ffbc1.
Added comments regarding deactivation due to error