notes on password change decision logic
add initial list of vulnerable sites

from https://github.com/musalbas/heartbleed-masstest
skeleton for history check page
open history check after installation
factor into reusable function, attaches content script
build a set of previously visited hostnames to check
modularize history check
use OpenSans per Mozilla guidelines
flesh out first run page
distinction between first run and history check