Add security headers, configured on or off in .env, provided by helmet module for bug 1017175
Change headers to default to more secure
Add a note about HSTS in the README
removing some dead code
disabling navigation from backspace. Fixes #1182.
Checks to see if a component has listeners or broadcasts before adding the channel menu and vis lines element.
Small margin fix for tray items.
Fixed missing (X) on unused channels in the channel menu and removed unused function.
Merge pull request #1370 from flukeout/menuxfix

Fix for channel menu bug
fix #1314 Pass username to makeapi
Fixed
* Invisible card tabs in chrome
* "No such card" card deleting bug
Merge pull request #1367 from flukeout/traystylefix

Small margin fix for tray items.
Merge pull request #1344 from ScottDowne/deadCode

removing some dead code around createURLPrefix
Merge pull request #1374 from flukeout/cardnavfix

Fixed
Merge pull request #1365 from flukeout/emptymenufix

Empty channel menu fix.
only warn if the renaming has an actual empty string
add locale to makeapi data
fix #1265 flathead to appmaker
keydown on window object seems to work fine
Merge pull request #1361 from mozilla-appmaker/backspace-key-1182

disabling navigation from backspace. Fixes #1182.