set up basic auth to jvm plugin backends
protect core server with basic auth too
generate and share password for core instead of using placeholder constant
make nginx temp dir use-only readable, secure node with basic auth
working with login from ipython.js except CORS checking on server is disabled
fix origin to match host
remove debug code
secure Rserve port.  better handling of ipython login POST.
merge with master
fix old bug where a directory named "%(client_temp_dir)s" was created, handle setting the internal envars when a plugin has a custom defined environment, rename envar beaker_ipython_dir to beaker_ipython_tmp since it is used for R too, move R temp files there and make them secure.
use 127.0.0.1 for synthesized host http headers for python websocket so that when we are connecting from a remote host the security cookie name matches
fix secure login for both ipy1 and ipy2, not just ipy2
update ruby and julia to follow ipython changes
merge with master
turn off nginx debug output
finish merge of ipython.js
remove outdated comments
Merge pull request #294 from twosigma/plugin-fixes2

Plugin fixes2