More chat log improvements

Log ACTION (/me) messages, and pick up the "staff"/"admin" flags that are sent through a different channel to the "subscriber" flag.
Expand `apipass`.

`apipass` parameter with a recognised token is treated like a valid
session cookie. So things like `http://lrrbot.mrphlip.com/api/show/<show>`
can only be used with proper authorisation and locally testing mod-only
pages doesn't need changing `login.py`.

`apipass = "dickbutt"` in `secrets.py` needs to be replaced with
`apipass = {"dickbutt": "lrrbot"}`.
Merge pull request #43 from andreasots/apipass

Expand `apipass`.
Fix hang in /notifications/newmessage

It was trying to call botinteract to get the session header, but that never completed because the bot was busy making the newmessage call to the server.
Remove !fandraft command - that's not where the fandraft chat is happening any more
Include location in !next/!nextfan

Closes #44.
Merge pull request #46 from andreasots/nextfan-urls

Include location in !next/!nextfan
`urlize` text between emotes.

This breaks some emotes like `<3` because the regex uses HTML entities.
It also breaks `;p` for some reason.

Closes #47 but introduces new bugs.
Recurse to both sides, fix capture groups, replace HTML entities.
Merge pull request #48 from andreasots/chat-log-formatting

`urlize` text between emotes.