Fixed bug in authentication code. Non-active staff members may
no longer log in
Update reference to mess_auth/util.php
Fixed bug in coopdeals upload.

CSRF token added to form.
Put @session_start() call in productListCallback.php
Tons of changes. See below.

- Fixed lots of bugs in the new special order syste
- Upgraded to jquery 1.11 and jquery ui 1.10
- Added instructions for special order system