Search for organizations as well as people

Uses the API internally over HTTP as it's much cleaner than trying to
use it directly in code. Still needs to handle results with more than 30
matches.

Fixes #476
update popit-api module to version that has image upload

Update the API to be able to accept image uploads and also to update
image properties

Fixes #214
correct membership tense

Handle cases when we have a start and an end date to prevent things like
current memberships using 'will be a member of'

Fixes #663
add alternative image URL to match API schema

The API uses a different URL scheme to identify images so add an
alternative one for the UI so the two can match up.

Also update shrinkwrap to point at the version of the API that uses the
same URLs

For mysociety/popit-api#84
Pretty print json in production

This makes it easier to read in the browser when you don't have a json
prettifier extension installed.
Add a link to users PopIt instances
Update popit-api
Use the html url in search results
Prevent mixed content warnings from font loading
Add secure middleware to redirect to https

Piece of middleware that will redirect all non-api urls to https.

We're skipping the API urls for now so that backwards compatibility is
preserved for those that are currently using the API. The API is still
available over https, though.
Add redirect_to_https config variable

This defaults to false but when set to true the secure middleware is
used which redirects users to the secure version of the site.
Enable express' "trust proxy" setting

This means that express will set 'req.protocol' as 'https' based on the
value of the 'X-Forwarded-Proto' header.

See http://expressjs.com/3x/api.html#app-settings