change window.* IPC calls to fakeWindow to properly implement .close()

window.close() is different from (FakeWindow object).close()
README: mention window.open and stuff
urlblocker: another google domain
add WYPopoverController to make a chrome-style popover for settings button

Add refresh button
don't always focus url field when opening new tab, let caller do it