Merge fix (no "vfs icon" code)

I think this is how you merge it properly (not sure what you wanted to merge as the merge just showed files modified) Took me 4+ tries and one repository removal :|  If there's something you don't want merged, say and I'll make a new pull request without them.

##### Changes briefly:
 - added vfs mdl importing (only works if you have vfs module)
 - !cake added some profiling code, should not do anything without profiler
 - luadata hardening, it's no longer possible to execute arbitrary code with luadata loading so it should be super safe to load even other user's content, tested on meta and seems to work
( Without this people could also run code on non sv_allowcslua servers and possibly escape the jail )
 - etc?

I'm feeling like this after the merge
![](http://i.imgur.com/3et2CfS.jpg "")