Specify temporary redirects for sessions
Add a permissions framework for flexibility

Users now have a "perms" property, which is an object with an arbitrary
list of keys that refer to permissions.  Initially, this is only set to
use "createSessions", but we can add future permissions as the need
arises, without continuing to overload "superuser" and "admin" notions
for each thing.
Slow auto-farmer down, and farm toward cap
Merge branch 'master' into header-ui
Merge branch 'header-ui' into permissions
Add cache buster to session links; fix app reload.

Add a ?nocache=<%= new Date().getTime() %> query arg to links to join
sessions in an effort to ensure old cached redirects are not used.

When the facilitator iframe reloads, it wasn't clearing the
tellParticipants interval, resulting in errors from the stale (leaked)
handler firing on a no-longer-existing iframe.
Merge branch 'master' of github.com:drewww/unhangout into header-ui
Add missing `save` calls for sessions

Setting sessions' hangout URLs was not resulting in `save` calls,
potentially leading to "in the wrong hangout" type errors.  Persist
hangout URLs.

Also, refactor the calls for creating new event sessions for clarity,
and clear connectedParticipants from permalink sessions on server
startup.
Merge branch 'master' of github.com:drewww/unhangout into header-ui
Merge branch 'header-ui' of github.com:drewww/unhangout into header-ui
Merge permissions, refactor and add tests

 - Combine common code in event creation and editing.  Add validation
   logic and tests.
 - Replace hard-coded timezone <option>'s with list obtained from
   moment-timezone data.
 - Fix some UX issues with datepicker
 - Remove summernote rich text editor for now until we can resolve HTML
   validation incompatibilities.
 - Remove db-set formatted date value, in favor of a method to calculate
   date formats.  Add formatted date to data serialized for clients.
   Also add sanitized description to serialized data.
 - Replace some uses of `should` with `expect.js`
 - Move scripts particular to event editing forms (datepicker, rich text
   editor) into the event form view rather than global header.
 - Replace un-escaped {{= }} with escaped {{- }} in all templates, with
   the exception of pre-sanitized input.
 - Set event creators (who are not superusers) as admins of the events
   they create.