Be careful not to send a null ADMIN_APP env var
Changes to how Meteor.settings is filled on Galaxy

(a) Prefer $APP_CONFIG over $METEOR_SETTINGS

(b) Allow $APP_CONFIG's settings field to be a string which we
parse (which will be the default soon)
Clean up DomRange, phase 1

- Get rid of DomRange "host objects" (too confusing)
- start to use `r instanceof DomRange` instead of `'dom' in r`

Ported domrange tests; all tests pass
observe-sequence: fix non-string ids
observe-sequence: test for string array transition
fix getContainingComponent (and some tests)

stuff I missed when changing domrange
Merge remote-tracking branch 'origin/devel' into sso

Conflicts:
	packages/accounts-base/accounts_client.js
Fix tiny comment typo
Smooth over some cross-browser CSP differences.

* Adding "foo.com" to your CSP via browser-policy now adds both
  "http://foo.com" and "https://foo.com". This smooths over the fact
  that some browsers interpret "foo.com" as "http://foo.com" and some
  interpret it as http AND https.
* Trim trailing slashes from origins. Firefox does not allow content
  from foo.com if you add "foo.com/" to your CSP.
Add frame-src to browser-policy-content.
mv spacebars.js spacebars-compiler.js
Upgrade jquery-waypoints to 2.0.3
Adjust docs to waypoints 2.x and add a delay for deps flush to increase performance on scroll.
Spacebars: better errors, comment handling

Give better errors (and in some cases, errors at all) for cases like:
- `<a {{{x}}}>`
- `<a {{#if x}}foo{{/if}}>`
- `<a {{k}}={{v}}>`
- `<a x{{y}}=z>`

Also, allow comments (`{{! x}}`) anywhere a non-comment tag is allowed
Use regex to replace trailing slashes from browser-policy URLs.

Thanks glasser!
Throw if $MONGO_OPLOG_URL is not a replset

`new MongoConnection` can now yield. I can't remember why I thought this
would be a problem when first implementing OplogHandle, and it does not
seem to be from initial testing.
Merge branch 'devel' into sso
Test that template in DOM before rendered callback fires
Use custom attribute handler for 'value' and 'checked'.

Setting these attribute on DOM elements only affects their initial
state. Instead, one should set the JavaScript property on the
DOM element directly.

Fixes #1752
Improve a comment