HACK: fix Stripe webhook errors with tokens including dash
Style cleanup.
Add arg for binary mode to CMemcache.
Disable binary mode on rendercache.
Disable binary mode for permacache.
Disable binary mode for pagecache.
Disable binary mode for ratelimitcache.
cache.py: Enable verify_keys for mc ASCII protocol.

The memcache ASCII protocol is vulnerable to injection attacks, so tell
libmemcached to verify keys are valid before sending them to memcache.
Enable link attribution on GA clicks
Add VUser() to OAuth only endpoints

In preparation for application-only (non-user) OAuth access.
OAuth2: Application-only OAuth2

This implements the client_credentials grant type.

This allows 3rd parties to use the OAuth domain for
logged out (user-less) API access in addition to existing use for
logged in access.
Docs: Minor update to POST_access_token docstring
OAuth2: Don't make installed apps use secrets

Installed apps are considered "public" as part of the
OAuth2 spec (unable to keep a secret). Don't
show a secret for such apps on the /prefs/apps page,
and don't check the secret as part of client identification
for such apps.
OAuth2: Access Token defaults should be strings

The string u'None' was getting saved for some defaults.
Revert "Use lang_override for all "en" variants."

Provide an escape from pirate day.

This reverts commit cc3af6e8ff687b0d4e42925e345679975afe4365.
Revert "temp commit - fallback for renamed payment_blob key"
PromoteLinkForm: don't preload any inventory data.
Update readme for short blurb on contributing
Inbox counts: Only unnotify on comments
Load button info with JSONP to avoid CORS HTTPS errors