fix some problems with add_source js calls
track invalid input
change redirect on nonce failure
log the user out when things smell fishy
use functions to wrap global js vars to make them immutable-ish
minor cleanup
fix hm_var refs in the pop3 module
do ws compression for assets at minimal. fix escaped double slash loss
in exec()
folder expansion fix