Check that campaign belongs to the specified link.
UserController: check item._deleted rather than item.deleted.

Comment.add_props can overwrite comment.deleted to be False even
when comment._deleted is True.
POST_promote_note: websafe new notes.
PromoteController: abort if link or campaign are missing.
Make it possible to unset Account.cpm_selfserve_pennies_override.