Allow remote requests to /api/emails

They do not need csrf token
Ensure titles
Add agent.csrfToken for tests
Fix assert messages
Fix csrf tokens for tests
Add missing utils/fetch.js
Add window.CSRF_TOKEN for component tests
Revert "Add window.CSRF_TOKEN for component tests"

This reverts commit fc9f6440308e8270a5f65223cc0629397e55dbf6.
Lazy load CSRF_TOKEN in fetch
Log js build times
Fix ticket ordering
Do not throw any puavo-rest errors on SelectUsers
Fix debugger for setBackbone

Do the actual setState out side of the promise chain so the debugger
can catch it.
Render 404 for Ticket.NotFoundError on /api
Add app.delete("/api/tickets/:id/tags/:tagName", ...) #12
Do not assert handlers at model level
Add ACL engine #131

And remove model level checks in favor of api level checks
Implement remove tag button #12
Managers can now close tickets #67

without being a handler
Use acl engine for follow toggle