(bug 4062) Initial OAuth implementation

This currently does not allow anyone to use OAuth to auth anywhere
but allows the OAuth token process to work.
(bug 4062) Fix protocol version related code
(bug 4062) Fix various concerns
(bug 4062) Refactor code to remove indent
(bug 4062) Missed explicit protocol_version
(Bug 5323) Disable parsing of external entities in synsuck and the importer

* creates the DW::XML::RSS/DW::XML::Parser modules to replace their
  XML::* equivalents. Works basically the same, just with a tighter
  configuration
Issue #672 - Respect 12 hour time preference in site scheme

Fixes a bug where viewing one's own journal in site scheme did not respect
12 hour time preference and would display 24 hour time. Fixes #672.
Merge pull request #708 from hotlevel4/bug672/Respect12HrTime

Issue #672 - Respect 12 hour time preference in site scheme
Remove debug code
Explicitly detect `isremote` for the journalselect event

(And do so only when we're "posting as other")

We'd assumed that a change on #postas_usejournal or #post_username would
only be triggered if a user selected "post as other", therefore isremote
would automatically be false.

However, Chrome started firing a change event on #post_username even
without user input (perhaps to do with autocomplete?). So now we
explicitly check the current remote against the username of the user
we're posting as..

But we can't just compare postas_usejournal to postas_remote because
they could be different because of autocomplete. So we also make sure
that all this only happens when the "post as other" radio box is
selected

Fixes 709.
Hide/show icon component even when there are no icons

Move the hiding/showing of the icon component to above the checks for
whether the user has icons or not. That way, when someone is doing a
"post as other", they don't have an irrelevant "upload icons" link
staring at them
Merge pull request #711 from afuna/update-page-chrome-bug-709

Fix icon/crosspost components not showing up in latest chrome
Add settings for compass compile in prod vs dev

Fixes #712.
Merge pull request #713 from afuna/compass-environments-bug-712

Add settings for compass compile in prod vs dev
Remove warning for CLA

We now have an active link to it

For #663
Merge pull request #715 from afuna/cla-663

Remove warning for CLA
Fix #675: add archive.org as an embed source

Includes one passing test but could probably use the addition of a few more?
Fix #676: Add video.yandex.ru as embed source

Not speaking Russian I can't read relevant documentation to make sure
I've got the formats of individual video URI-components correct but I've
gone for an approximation based on what examples I can find.
Fix #678 (add episodecalendar.com as embed source)

Test URI will 404 but is correctly formed

Test URI is correctly-formed but not a real link (none was provided)
Merge pull request #718 from Darael/embed-sources-675-676-678

Add embed sources (fixes #675 #676 #678)