Add package.json description field to appease npm
Center heading on login page in Firefox by not using legend tag
Fix flexbox centering on Safari
Manage livereload wholly via Grunt

Inject the livereload js file via grunt-replace and reference whatever
dev host is specified in env.json
Loosen Content Security Policy so that svg message badges display
Self-host webfont for appcache-ability
Use NOTIFIER_DEV_HOST in CSP livereload header

This helps with cross-device testing. The header-derived hostname may
otherwise be valid but not reflect how the site is being accessed.
Media queries for improved ios display
Move no-new-messages message out of header and into body