Add Frederik Braun as the reporter for CVE-2013-4409.

This was, unfortunately, missing from our release notes. I've added him
and given credit for finding and fixing the problem.
Fix Subversion repositories on hosting services.

The Subversion code expects to be able to access Subversion repositories
directly. This works fine, except when accessing through a hosting
service and needing a login/password. The Subversion code expects
repository.username and repository.password to be filled in.

There's now a Repository.get_credentials() function that fetches the
username/password from either the repository or the hosting service (if
it otherwise stores the password). This allows the Subversion support to
log in appropriately.

There are other SCMTools that also make use of the username/password, so
I've updated all call sites to use get_credentials. This will allow us
to do stuff like use decrypt_password in a central place in the future.
Add support for the Unfuddle hosting service.

This supports Unfuddle as a hosting service. Unfuddle provides Git and
Subversion hosting.

Unfuddle's pretty straightforward to support. It makes use of HTTP Basic
Auth, and requires base commit IDs for posting.

There's also some improvements to RepositoryForm to provide more data to
the HostingService's authorize and check_repository functions.
The Unfuddle support uses this to do better validation of a repository
and an account, which we should make use of for other services.
Fix a breakage from a whitespace cleanup.

The tabs-to-spaces cleanup I made in my recent svn.py change caused a
statement to be unindented one extra level. This is now fixed.
Remove an unnecessary external image from the review request email.

We use an image for the background of top of the review request table, but it
doesn't add much, and external images in email are annoying.

Testing done: Ran tests. Viewed emails.

Fixes bug 3080.

Reviewed at https://reviews.reviewboard.org/r/5182/