Fixed out-of-bounds access in xmlrpc/main.c
Fixed resource leak in libathemecore/linker.c
Fixed resource leak in nickserv/return.c
Fixed resource leak in libathemecore/function.c
account: handle entity ID collision cleanly
groupserv: likewise
Merge pull request #291 from partedcloud/master

Various bugfixes
contrib/cap_sasl.pl: rename `state` to `step` as other SASL implementations call it
contrib/cap_sasl.pl: make the code less repetititive
contrib/cap_sasl.pl: do not crash if timeout happens after disconnecting
contrib/cap_sasl.pl: fix $PATH check

Empty tokens in $PATH are supposed to mean "current directory".