Fauxtin: Remove Todo, clean up readme

We haven't used todo.md in a long time. All the tickets are in JIRA.
I've just removed some old wording from the readme.md
Fauxton: add missing closing tags
Fauxton: Inject database into view

it's handled in the options and used, but was never passed
Fauxton: Implement bulk deletion for all-docs-listing

Introduce a collection which keeps track of documents that will
deleted using the CouchDB Bulk-update API.

The collection fires events, so the view is noticed.

Closes COUCHDB-2153
Fauxton: Show design doc name in status dashboard for indexer

Using a custom objectField that consists of the database name and
the design document name when the type of the task is indexer in the
status dashboard.

Closes COUCHDB-2222
Fauxton: Remove dead code/view: database sidebar
Fauxton: use local version of font awesome

We are currently referencing to Font-Awesome on a CDN in the
variables.less, which is basically nice, but some users of
CouchDB are firewalled at work and can just use the local
network.

Additionally offline people without internet can't use Fauxton
if the font is loaded via CDN.

This also removes the cache-buster for imgs (GET-Params with
version) in our routing for the local files of the dev-server
to make it work, in the future we might want to use a real
router module for the long if/else block.

Closes: COUCHDB-2238
Fauxton: Update breadcrumb on duplicate doc

Small fix that makes sure the breadcrumb is updated with the new doc id
when a document is duplicated.
Add Experimental Content-Security-Policy-Support (CSP) for Fauxton

Like every web application, Fauxton is vulnerable against XSS and
CSP is a technology that tries to help against that.

The patch makes it possible to enable CSP for the /_utils path and
allows configuration of the sent header.

The default setting for the value of the header breaks the old
Futon, when CSP is enabled there. The old Futon has alot of
inline-JavaScript which is not allowed in the setting I have
chosen as default.

For development, the header is also sent from the Node server
which launches Fauxton in dev-mode.

People can enable the feature by setting enable = true in the
section [csp] of their configs
Fauxton: Fix show me api link

 * use data-bypass attribute to circumvent backbone routing
Tentatively update version on master
Fauxton: Fix font awesome url to work for release
Fauxton: Content Security Policy optional for dev

This just makes the content security policy optional for
development.
add sinon.js
fix attachment view to bypass
Fauxton: Create fx roles

Fauxton auth works by checking what roles a user has and then decide if
they have access to a specific route. The only problem is a regular user
might get created but not have any roles. Unlike an admin user who get
assigned all the roles on creation.

The idea behind this is that certain routes should require a user to be
logged in but not necessary have any roles eg. #changePassword route.

This allows for a standard fauxton role that all logged in users get given so that
we can check via the roles if they are logged
Fauxton: Fix clone cancel button

This fixes the issue that when a user cancels a clone doc it goes back
to all docs. Now it just closes the modal.
add ZeroClipboard to LICENSE file
Fauxton: updated dev dependancies
Docs: fix typo in Accept header value

This closes #250

Signed-off-by: Alexander Shorin <kxepal@apache.org>