Added function for escaping query strings and fixed several XSRF vulnerabilities.
Refs #5323: More fancybox BC support
fixes #6100 auth_gettoken now works with email address
Merge pull request #6106 from jeabakker/6100-webservices-auth-gettoken

fixes #6100 auth_gettoken now works with email address
Fix inline docs for set_input
Fixes #6177 - refuse to deactive plugins used as dependencies
whitespace fix
move deactivate event registration to the user-triggered action
Refs #6136 - Adds test for elgg_http_url_is_identical
resolved the todo of using elgg_normalize_url in the
http_url_is_identical and also fixing the bug where url2 did not get
site_url prepended
Added more microformats to the profile page
forward to all if no group archive requested
Merge pull request #6151 from jdalsem/patch-9

Forward to list of all group blogs if archive not requested
fixed a unittest I broke in #398
invalidate the subtype_cache when removing a subtype
ElggSite->getURL() returns the site url instead if view/<guid>
remove thumbnails if no longer needed
as request by mrclay return a boolean
changed the bugtracker url from the developers plugin to GitHub
fixed issue when reordering plugins to second last position of other
column that has more than 2 widgets