Follow-up on review
(Issue 763) Switch to ESAPI module; Distinguish between formatting and escaping
(Issue 763) Remove invalid tests that are covered elsewhere
(Issue 763) Code clean-up
Removed IO.readFile in favour of fs.readFile
Merge pull request #820 from nicolaasmatthijs/ioReadfile

Removed IO.readFile in favour of fs.readFile
(Issue 763) Code cleanup
#819 - Using `previewsId` for scoping PDF CSS file

This commit scopes the CSS rules in the combined.css file for PDF
previews to the `previewsId` rather than the `revisionId`. The benefit
of using the `previewsId` is that we can reuse the previews when
restoring an earlier revision.

The CSS class name that was used to scope pdf2html's CSS rules is stored
in the `previews` object on the content profile as a `cssScopeClass`
property.
Merge branch '819-previewsId' of https://github.com/simong/Hilary into 819-previewsId
Follow up on CSS scoping
Merge pull request #812 from mrvisser/issue-763

Escape HTML in comment/message emails
#671 - Allow for redirecting with the external auth strategies

Specifying a `redirectUrl` request parameter in the external
authentication strategies will redirect the user to that URL once they
return to the application. If no value is provided, `/me` will be used.

I also took the opportunity to streamline the external auth strategies
a little bit so we don't need to paste the complex passport boilerplate
in each strategy's REST file.

Currently supported strategies:
 * CAS
 * Facebook
 * Google
 * Shibboleth
 * Signed authentication
 * Twitter
#671 - Addressed Open Redirect issue in external authentication
Clearing redirectUrl cookie
#671 - Moved external authentication strategies to POST
Using object for upconfigConfigAndWait
Added a bunch of external authentication tests and improved CAS error handling
Bumping timeout for travis tests as the coverage seems to have slowed it down a bit
Create notify-follow.html.jst
Create notify-follow.meta.json.jst