Introduce default robots.txt
Post settings published_at date improvements & fixes

closes #1866, fixes #2067, fixes #2068

- Upgrade client side moment to 2.4.0 to match the server side script.
- Add a guard to pub date to fix #2067
- Add new format to close #1866
Merge pull request #2077 from ErisDS/date-fixes

Post settings published_at date improvements & fixes
Improve password reset token

no issue
- added check that a combination of email + expires is rejected after
10 attempts
- changed comparison to time independent method

Thanks to @chiiph for reporting this issue!
Merge pull request #2082 from sebgie/fix-reset-token
Version bump for 0.4.1
Merge branch '0.4-maintenance'
Spit & Polish
Override border on login input:focus

Fixes #2088
Disable publish button until deffered is resolved

closes #2040
- save post disables the publish button
- publish button remains disabled until deffered object is resolved
Adding a link to config docs in config.example.js

closes #1997
Tag needs escaping. Wrongly call showSuggestions.

close #2087, fix #2089
- escape tag.
- do not call showSuggestions when key is UP/DOWN. or the selected tag will
  always be clear.
Load Apps Sandboxed

- Based on suggestions from hswolff loading with a Module class approach
- Loads relative modules in child sandboxes
Removed author tag inside channel tag in RSS

closes #2114
- instead of putting author in feedOptions of node-rss, it was moved to itemOptions
- supplying author: user ? user.name : null in itemOptions will still result to creating a dc:creator tag inside item tags so the info needed to have the author is still there like before
- node-rss should however still fix this quirk to not have that nasty author tag in channel tag when you supply author in feedOptions
Merge pull request #2091 from jgable/sandboxApps

Load Apps Sandboxed
Fixing App unit test on Windows

- switched test from exact string to regex to match both types of paths
Replace underscore with lodash.
Merge pull request #1536 from jdalton/lodash
Removed mailto auto-linking.

fixes #1617
- Removed test
- Removed auto-linking from showdown gfm extension
We’re not really in alpha any more