Make app requireable
Username must contain at least one alphanumeric character

Fixes #32
Properly position flash messages on empty profiles
Pass document to validators created with `buildValidator`
Usernames should be case insensitive

Fixes #33
Use protocol in config.url
Run username already in use validation only when field was modified
Only enable trust proxy and secure cookies in production
User editor for admins

Closes #15
Use new URL helper in a few more views
Small update to floating label JS
Bump a few deps
HTML emails

Closes #29
Remove st dependency and implement session bound return path for auth actions

Assets are now purely served by nginx in production, so no need for st.
Save MD5 hash of email as gravatarId

Closes #43
Make floating labels degrade gracefully

Fixes #14
Fix session.cookie.secure in prod mode
Fix jade complaining about missing space
Track sessions

Closes #40

Also bumps a few deps, and other stuff...
Make datetime attribute of timestamps valid