Added function for escaping query strings and fixed several XSRF vulnerabilities.
Fixes #6065: Log display no longer emit deprecation warnings and uses fewer queries
Refs #5323: More fancybox BC support
fixes #6100 auth_gettoken now works with email address
entity list limit should respect passed limits and just provide defaults
Refs #6023 passing requested uri as parameter
Fixes #6101 forces a default on metas and links key in view in case someone calls the view directly or removes the keys in the 'head', 'page' plugin hook
Refs #5911 Adds function elgg_get_subscriptions_for_container() and equivalent subscriptions service method.
Group edit form: Hide label for hidden fields

The group plugin_hook for "profile:fields" accepts an array of form
fields and the edit.php page that outputs these values attempts to
output a label for the hidden fields.
Simplify logic and clarify output template
Merge branch 'bradmsmith-master'
Merge pull request #6106 from jeabakker/6100-webservices-auth-gettoken

fixes #6100 auth_gettoken now works with email address
Make sure limit is int
Merge branch 'beck24-group-member-limit'
Merge pull request #6092 from mrclay/6065

Fixes #6065: Log display no longer emits deprecation warnings and uses fewer queries
Reverts f4a1a05f5302ff3b6332c3ccfd9ecd3416bae4de
reverts 0daf81c3dd620b1d33cedbde6cfaabe75f409336
Fixes #6097: Sends correct Content-Length with profile icon
Updated docblock for elgg_get_subscriptions_for_container()
Merge pull request #6115 from mrclay/6105

Fixes #6105: Reverts group module headers to 1.8 markup