This adds the ability to filter user signup with a whitelist
instead of or in addition to a blacklist.

Fixes #817

Fix anchor tags in some wikipedia URLs being matches as a hashtag

StreamEntry model. Simply render Salmon slaps as they are needed

if account lock info was up to date, otherwise re-do the FollowService
with now updated information

Try to fix Travis CI setup

redis-backed "mentions" timeline as redundant (given notifications)

affected, replaced onClick handler with onMouseUp/Down to detect text
selection not trigger onClick handler then

application website validation, don't link to app website if website isn't set,
also comment out animated boost icon from #464 until it's consistent with non-animated version

A couple of places were using "reblog" rather than "boost" - this updates them to match the web UI

Reflect "requested" relationship in API and UI
Reflect inability of private posts to be reblogged in the UI
Disable Webfinger for locked accounts

Filters out hidden stream entries from Atom feed
Blocks now generate hidden stream entries, can be used to federate blocks
Private statuses cannot be reblogged (generates generic 422 error for now)
POST /api/v1/statuses now takes visibility=(public|unlisted|private) param instead of unlisted boolean
Statuses JSON now contains visibility=(public|unlisted|private) field

removing web app capability from non-webapp pages

for avatars/headers, resize avatars down to 120x120 instead of 300x300. Set cache headers on S3 stuff, also
make it private (aka only accessible via expiring links to prevent hotlinking)