[#7353] added confirmation dialogs for wiki page deletion & restoration.
[#7528] change html sanitization library to fix XSS issue

Feedparser library hasn't been updated in years.  html5lib
has the same sanitizer with updates, including fixes for this parsing
issue.  It also has other behavioral changes including:

* trailing slashes removed from URLs (weird, and not ideal)
* quotes around attributes like href removed when not necessary
* changed order of attributes
* no closing </p>; <br> instead of <br />; etc
* disallowed tags are escaped instead of removed
* comments are removed instead of left in
[#7528] add html5lib dependency, six
[#7528] set alphabetical HTML attributes for consistent test runs
[#7484] Changed oauth app names to be unique per user instead of globally unique
[#6930] Fix: blog post rename notification is backwards

Signed-off-by: Tim Van Steenburgh <tvansteenburgh@gmail.com>
[#7508] Added project creation date to JSON response
[#5472] Replace Spinner js with animated gif

Signed-off-by: Tim Van Steenburgh <tvansteenburgh@gmail.com>
[#5472] remove references to spin.min.js
[#7551] session cookies can be httpOnly; remove unused 'secret'; comments

The beaker.session.secret value is only used for storage-backed sessions,
we use the validate_key for pure cookie sessions.
[#7293] Trove Categories Listing
[#7293] PEP8 & Import optimization
[#5948] Fix: Status on individual Milestone view always shows Open

Signed-off-by: Tim Van Steenburgh <tvansteenburgh@gmail.com>
[#7507] Fixed unicode decoding issue during project serialization
[#7027] Cache /​nf/​tool_icon_css better

Signed-off-by: Tim Van Steenburgh <tvansteenburgh@gmail.com>
[#7027] fix key name, don't set quite as long
[#7325] Disabled Fork button on empty (uninitialized) repositories, since they cannot be merged
[#6495] Screenshot admin UI improvements

Signed-off-by: Tim Van Steenburgh <tvansteenburgh@gmail.com>
[#7545] Only allow local redirects from return_to on login form
[#7545] strengthen negative test cases