Add placeholder sessionKey to configuration.
Add sessionKey check and generation to develop.js.
Add cookie-parser.
Sessions, tokens, passwords, and frameworkishness.

On the to-do list: find out a good way for guest sessions to change
frequently without causing token errors (and sessions in general).

 - Silently pass the token check for tokenless guest cookies?
 - Require user to perform actions again?

Neither of these really expand to user sessions, though those
should probably live for several months.
Behave nicely when session entries are removed.
Some navigation and a logout button.
Check Content-Type of request bodies.
File uploads, user objects, and permissions.
Footer links.
Remove session when logging out; correct guest check.
Terms of service, submission agreement, and AUP.
Update dependencies.
Semi-automated Nginx configuration.

Let’s hope it works for everyone!
Add note about /etc/hosts.
Add configuration option for host and port
Merge “Add configuration option for host and port” from Nullreff/phoenix
Remove unused import.
Use BIND instead of PORT.

(It’s deployed with Unix domain sockets.)
Disable compression for proxied responses.

(Correctly, this time.)
Merge remote-tracking branch 'upstream/master'