import thumbor and dependencies:

derpconf, backports_ssl_match_hostname_3_4_0_2, thumborPexif,
upgrade tornado to 3.2 (that contains security fixes)
remove the unbreak-syntax-highlight hack