Homepage on Profile

Addresses part of #1074 but does not resolve it.
Also includes material relevant to #911.

http://jenkins.buttonweavers.com:8080/job/buttonmen-AdmiralJota/196/

Dependent on #1079.

@cgolubi1 This pull definitely merits special attention. It has us linking to URL's specified by an untrusted user. I didn't do anything to blacklist where the links are going, since I figured that our focus was just on preventing anything malicious being done on our site. In theory, ```Env.sanitizeUrl"``` *should* turn malicious attempts to execute code into harmless invalid URL's. What do you think -- does it seem adequate to you?
Okay, i'm dubious about this regexp, and it seems like the people on stackexchange are too.  Why do we need to allow people to include un-HTML-encoded parentheses and semicolons in their URLs?

The other thing is, i'm not in favor of silently cleaning URLs.  If the user is trying to be malicious, they can just check the result and see what happened, so it doesn't matter.  If the user *isn't* trying to be malicious, they may not even notice that their URL got munged.