set up basic auth to jvm plugin backends
protect core server with basic auth too
generate and share password for core instead of using placeholder constant
make nginx temp dir use-only readable, secure node with basic auth
working with login from ipython.js except CORS checking on server is disabled
fix origin to match host
remove debug code
secure Rserve port.  better handling of ipython login POST.
merge with master
Add a test for setting a notebook headline
Add a class to know when a evaluator is ready.
Update dill.js version to 0.2.x
Add notebook editing test coverage
Merge pull request #284 from twosigma/dev-file-dialogs

Fix a bug with treeview trailing slash
Fix a bug in getCometdUtil
Merge pull request #287 from twosigma/dev-minor

Fix a bug in getCometdUtil
Fix #289, after moving cells, saving notebook now save new changes
Merge pull request #290 from twosigma/fix-289

Fix #289, after moving cells, saving notebook now save new changes
fix old bug where a directory named "%(client_temp_dir)s" was created, handle setting the internal envars when a plugin has a custom defined environment, rename envar beaker_ipython_dir to beaker_ipython_tmp since it is used for R too, move R temp files there and make them secure.
use 127.0.0.1 for synthesized host http headers for python websocket so that when we are connecting from a remote host the security cookie name matches