Add :length validation to Note#text and Evidence#content
CHANGELOG - some of the features in 3.0
UploadController - make compatible with gemified add-ons only
Delete CategoriesController / Helper as we don't use it any more
Issues#destroy - avoid ToCToR condition

We first pull the note IDs for the issues and then load them as Issue
object. An Ajax call to #destroy could alter the collection between the
time of check and the time of read causing us to read an ID that is no
longer valid.
Merge branch 'dradis3_blackhat-arsenal' of https://github.com/dradis/dradisframework into dradis3_blackhat-arsenal