Security: use https for fetching artifacts. See http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/
Upgrade to sbt-rc version that supports Play 2.3.3

Conflicts:
	project/Dependencies.scala
Upgraded to latest template hash.

Conflicts:
	project/LocalTemplateRepo.scala
Fix offlineTests

 * update to latest cache hash
 * jump jshint to 1.0.1
Travis: Don't run offlineTests as part of integrationTests also

Because integrationTests pulled in offlineTests, the overall build
took too long.
Travis: reduce Xmx to 1G from 2G so we can do more processes

With sbt server we may have a fair number of JVMs so we need to
avoid immediately consuming the entire 3G on Travis.
Travis: add missing -J to memory options
Travis: set min size also since travis sets it larger than our proposed max
Merge pull request #680 from typesafehub/wip/havocp-from-1.2.x

Pick 1.2.x version bumps back to master
Fail WebSocket CSRF check with Forbidden status

Play 2.3 made it possible to return specific results to reject a
WebSocket, rather than just rejecting with an 500 error, so this change
takes advantage of that.

Note though that browsers don't allow you to handle this error in any
way :(.  So in addition to that, I log a warning, in case this does
happen, this will mean users report bugs with the warning, rather than
bugs saying that nothing happened.
Merge pull request #695 from jroper/websocket-forbidden

Fail WebSocket CSRF check with Forbidden status
Merge pull request #674 from benmccann/https-repos

Security: use https for fetching artifacts