Allow HTML markup for rich text attributes

Previously, the HTML was unintentionally escaped.

Fixes #1132.
Respect reviews feature flag on anonymous order status page

Reviews weren't hidden and hence the URL reversing failed.

Fixes #1133.
Show button "loading" message when authenticating
Clean reset password form

- Removed arguments for the password form that were not used
  (they are still catched by kwargs, not breaking backwards compatibility)
- Subject template is picked up from oscar/customer/emails folder.
  Removed unused template.
Support arbitrary number of permission lists.
Tweak ui.js to be easier to re-use
Ensure deleting a user doesn't delete their orders too

This change ensures that the order model's FKs all use
on_delete=SET_NULL.
Allow customers to delete their profile

We add a new form to the profile section that requires the customer to
confirm their password, but which then deletes their user.
Ensure templates are compatible with Django 1.4
Use email wrapper property

This logic is duplicated from the order model.
added block super into dahsboard body class blocks
Add migration for order on_delete changes
Merge pull request #1142 from tangentlabs/issue/1142/delete-profile

Customers should be able to delete their accounts
Include tox in requirements.txt
Update docs re customers ability to delete themselves
Re-number migrations to allow on_delete migration to sit at 0019

This ensures the on_delete migration matches 0.6.1, which is important
for people upgrading.
Merge pull request #1144 from informa/issues/dashboard-bodyclasses

Added block super into dahsboard body class blocks
Ensure deleting a site instance doesn't delete related orders
Remove uploaded media when rebuilding sandbox
Align voucher discounts correctly on basket page