Fixes timing attack when comparing passwords.
Fixes timing attack when comparing CSRF tokens.
Fix missing space when ordered.
Merge pull request #701 from Mickael-van-der-Beek/master

Fixes two timing attack vulnerabilities
Merge pull request #703 from Gank/master

Fix missing space when ordered.
Filter orphaned lists using permission system
Filter nav based on permission system
Adding permission objects to locals for views
Add support for mongoose history
Implement own permission system
Change default formatting of date controls
Filter navigation based on permissions
Preview in select
Items in listings don't display delete action if not allowed
Don't allow download of lists where not allowed
Item support for permissions and publish state
Home listing is filtered by permission
Listing of list item now supports permissions
Added mongoose history
Add setting for list to group item presentation