Escape error page content

Credit to Kenneth F. Belva (https://twitter.com/infosecmaverick)
https://hackerone.com/reports/3317
Merge pull request #39 from Sidnicious/patch-error-xss

Escape error page content
add a new x header for the okws version, and bump the version
Merge branch 'master' of github.com:okws/okws
When okws shuts down, just close idle connections instead of sending 410s
Fix unreliable jsonrpc behavior
Merge pull request #40 from egwynn/master

fixup the no-retry case
Merge pull request #41 from Sidnicious/patch-410

When okws shuts down, just close idle connections instead of sending 410s
fix child mode parameter
Major change to how okd handles dispatching client connections to web
server processes. The changes are the following:

* Instead of just reading and parsing the request line, okd now reads
  all the request headers.
* It sends the headers along to find_best_fit_child() so it can use the
  X-Forwarded-For header (or equivalents) to determine which child
  to send to.
* Add new options ChildMode=2, and OkdAllHeaders to control this new
  behavior.
Two fixes:

1.) The header parsing code in okd was reading off a buffer by 1
2.) Make sure to log the real IP in access logs on errors
add okoffice ip
internal ip
bump
nuke this check
make the IPs that are fed into is_internal() configurable through the new AllowProxyFrom config variable
add a new layer of security which allows for the insertion of a new header which also must pass the is_internal() check for setting the IP of the request
add an option to not use the real source header, and change is_ssl() to ignore it
Two things:
1.) Add a new header for setting a request IP
2.) Add an option to control the http keep-alive duration
add a utility for using uint64_t's in pub objects