separates business logic from validation for whoshiring payments page
adds ops facet
adds csplog to ops facet
starts adding metrics
adds metrics to registry and user facets
adds metrics to company facet
adds CSP headers for security
removes aristotle.js and tightens up content security policy
adds numbat-collector to vagrant box
fixes up tests for collecting metrics