Upgrade Django CSP; bug 989121
Allow anonymous users to validate hosted apps (bug 1090341)
Merge pull request #2685 from mstriemer/anonymous-hosted-app-validation-1090341

Allow anonymous users to validate hosted apps (bug 1090341)
handle feed items in ES that don't have feed element data (bug 1088001)
Fix double encoding of search queries in pagination meta (bug 1090239)
don't effectively limit on commbadge api for review history (bug 1090436)
unsub devs from comm when they're removed as collab (bug 1087276)
Merge pull request #2687 from ngokevin/unsub

unsub devs from comm when they're removed as collab (bug 1087276)
fix review history typo from debugging
Set stage/prod FxA URLs
Merge pull request #2688 from mstriemer/fxa-config

Set stage/prod FxA URLs
Commit from Mozilla Verbatim by user az.: 1620 of 1992 strings translated (0 fuzzy).
add new constants for version notes, public rev comment (bug 1090615)
make developer version note rather than rev comment (bug 1090615)
command to migrate Version.approvalnotes to comm (bug 1091160)
fix reviewer test related to comm constant name
add fxa email to priority queue and call atfork() (bug 1091294)
Merge pull request #2691 from andymckay/1091294

send fxa emails through celery correctly
Remove 32x32 icons to reduce feed endpoint size (bug 1088369)
Whitelist emails with a regex

Fixes #2693