JA-4548: Needed to set the Editor.hidden flag when orgDisplay was 'none'.
Content-Security-Policy fix for the iframe init process.

Instead of using an inline event handler, attach the (simpler) event
handler before adding the iframe to the outer DOM.
Fix autoresize plugin to work with body border and padding.
Merge pull request #399 from jivesoftware/upstreamContrib

Bug fixes from Jive