fixed pull-requests with cherry picking changesets
- fixed tests for them

move permission check of write access to repo groups inside a form.
- it's runned via create/edit/fork forms
- in case we have disabled repo creation, it will check root location write access for people that are not super admins, or have explicity create repo permission
- in case there's a group value passed to form, it checks just admin or write access

fixes #762, LDAP and container created users are now activated based on
the registration settings in permissions

make the htsts headers optional and stored in .ini file.
also don't use it with DEBUG

fixes issue #756 cleanup repos didn't properly compose paths of repos to be cleaned up.
- it just worked on repos on root filesystem

git hook handler shouldn't ever use cache instances
- moved cache invalidation into finally block so we invalidate at latest possible stage
- added scm_instance_no_cache property to get non cached scm instances always

reposcann should skip directories with starting with '.'
some code cleanup, moved all skipping to get_repos function

fixes for issue #731, update-repoinfo sometimes failed to update data when changesets
were initial commits

improved extraction of user from changeset when sending notification.
Fallback to repo owner if we cannot get the user

unified RhodeCode paster commands
- moved them to commont paster_commands package
- re-use sqlalchemy session initializaiton
- some docs updates

fixes #753 inform about some problems with antivirus software in RhodeCode
on windows

fixes issue #756 cleanup repos didn't properly compose paths of repos to be cleaned up.
- it just worked on repos on root filesystem

Implemented #738 Giving a user WRITE+ permissions on folder should not allow repo creation in root folder.
user can create repos only if he got explicitly permission for creating repos globally, or have WRITE+ permission on a group.
Then he can create repositories inside this group

pull request: update changeset list automatically - remove refresh icon

With most of the UI giving immediate response it was confusing that we had to
press 'refresh' manually'. The icon could also be misunderstood as a 'swap'
symbol or as reload/reset.

compare: show aggregated diff of what will be merged to other repo, using merge ancestor

pull_request.get_compare_data will also now return the ancestor that would be
used for actual merging. Showing a diff from that ancestor instead of the first
'new' changeset will give a more realistic diff that doesn't include merges.

compare: swap org and other when they refer to different repos, ie are pull request style

Pull requests will have a different from/to description - but in a consistent
and slightly better way that can be improved later.

A pull request diff is empathic: "How will this look for the peer I'm proposing to" style.

compare: rename optional compare_url parameter repo to other_repo

At the same time it is placed before other_ref_type and other_ref. Just to keep
a logical flow and (a new) consistency that will help the next refactoring.

Added missing migrations, and move update_repoinfo to RepoModel
migrations now update repo cache

repository extra fields implementation
- verion bump to 1.6
- migrations

Bring back rss icon for atom:
- http://www.mozilla.org/foundation/feed-icon-guidelines/
- http://en.wikipedia.org/wiki/Atom_%28standard%29

compare and diff: remove unused "bundle" functionality

The 'bundle' parameter was never set, incoming_changesets was thus always
False, remote_compare was thus always False, and InMemoryBundleRepo and
bundlerepo was neverused.

pull request: use unionrepo instead of outgoing

This makes it possible to look the 'moving target' symbols up in the right repo.

Using a revset with the right revisions also removes the need for pruning
changesets that are outside the requested range.

It will also not be confused by changesets that for some reason has been pulled
to the repo but haven't been merged yet. They are going to be 'merged' by the
'pull' request and should thus be a part of what is reviewed.

pull requeset: move stuff around, preparing for next change

- and make sure we don't pass unicode to Mercurial

header: don't use fixed position

A fixed div at the top prevents anchors and pageup/pagedown from working
correctly ... and it is not like the top menu items are used all the time -
next/previous page links would be more relevant to show in a fixed position.

made the upper menu as a dropdown to old fixed mode by clicking upper
semi transparent bar

make unread also a link, constantly was clicking that
- make the links and hover same as other links in that menu

don't show rss links - atom is the present and the future

- following the reasoning on http://selenic.com/pipermail/mercurial-devel/2012-December/046542.html

summary: show "Show by ID" toggler after the clone url

It looked like something important ... but most users don't need it.

summary: don't link explicitly to /summary

It is redundant and exposed ambiguous urls.