Drop no longer needed and too open crossdomain.xml

It allowed Flash apps on any domain to make requests on
behalf of a signed in user.

Thanks to Oliver Beg for the hint.
Add chat migration

* add chat_contacts table
* add chat_fragments table
* add chat_enabled column to aspects
* add chat_offline_messages table
Add vines, jsxc and devise token dependencies
Include jsxc deps and initialize the client on login
Set chat-flag for every aspect manually

On default none is permitted to chat with you.
You have to set extra privilege for an aspect.
Add jsxc to assets list
Add toggle_chat_privilege to aspect controller
Implement token authentication

* create a new token on a new session
* delete the current token on session exit
Chat privilege checkbox

* add to contacts header for later modification
* add to aspect creation box
Modify diaspora config file and add defaults
Add vines README file for cert instructions
Add locales for chat privilege function
Include the chat front-end if chat is enabled

* add jsxc helper file
Update .gitignore for vines cert directory
Add vines as foreman task
Start vines if chat and server is enabled
Print a warning unless they use a proxy

If you try to connect from a secure connection
to a insecure connection; Most modern browser
block the request and flag it as mixed-content.
Test token authentication; should allow it
Test jsxc helper spec; should respond with correct url
Test chat privilege option; should replace text/icon on trigger