Updated the bin path for both the apache and tor apparmor profiles.
Updated the corresponding lines for the securedrop-app-code postinst.

The securedrop-app-code currentyl only puts the profile in complain mode. This will need to be changed to `aa-enforce` when the apparmor profiles are flushed out
Ignore .DS_Store

Interestingly, these files were only created once I navigated into the
directories using the Mac OS X Finder.
Fixes for "Disable JS" bubble

1. Fix matching the TB user agent
2. Fix position of bubble for new TB (NoScript icon moved in TB 4.0)
3. Use correct icon for "Forbid scripts globally (advised)"
4. Nicer design for bubble
Formatting nit
Remove unnecessary verbiage from submission notifications
More compact submission list
Merge pull request #657 from dolanjs/ansible-apparmor-complain

Update apparmor profiles for ubntu 14.04
re-added handler to postmap /etc/postfix/header_checks

This needs to run before restart postfix for it to take affect.
added ssh commands for mon-staging vm
@kevinmg pointed out that the command to start the webserver for development VM was missing from the documentation.
Updated the grsec package name to current. a meta package will need to be put in place so we don't need to hard code a specific version

The grsec lock will not exist until the system is rebooted in the kernel.

Removed extra pax changes that were required for 12.04
Add cheat sheet for log file locations
Temporarily disable vagrant-cachier

This will slow down provisioning times, but fixes issues with apt that
appear to be caused by vagrant-cachier. Should re-enable when
https://github.com/fgrehm/vagrant-cachier/issues/128 is resolved.
Merge pull request #658 from dolanjs/smtp-header-check

re-added ansible handler to run postmap /etc/postfix/header_checks
Merge pull request #659 from runasand/develop

Yes, you will need a cable to hook the NUC up to a monitor
Merge pull request #660 from dolanjs/develop-mon-staging-doc

added mon-staging to list of predefined VMs
Merge pull request #666 from dolanjs/paxctl-grub-setup

Updated the grsec package name to current. a meta package will need to b...
Merge pull request #667 from dolanjs/logging-locations

Add cheat sheet for log file locations
removed ansible.skip_tags config line from the Vagrantfile config.
Merge pull request #668 from dolanjs/remove-prod-grsec-skip

removed ansible.skip_tags config line for app and mon vm