The regular expression was incorrect and was matching the occurance of any backslash, but this commit fixes it as well as reintroduces the MathJax fallback.

Rewrites the renderMath() function to sanatize, render math, and render markdown.

Big thanks to @tilgovi for help here.

Drop pyramid_deform and horus HTML views.

Firefox and IE apply the focus pseudo class to anchors when clicked.
This prevents our toggle button returning to it's natural state after
it has been clicked. This change blurs the element on mouseup to ensure
that:

 1) The focus state is removed when clicked.
 2) The focus state remains when using the enter key to trigger the
    toggle (also triggers a click event). Otherwise the user would lose
    the focused UI element when navigating with a keyboard.

It was originally only applied on hover and was causing display
inconsistencies in FF/IE where the toggle would turn red.

Fixes #1567

Close #1552

Remove info notification when closing the auth window

Separate session/helpers bundles, tweak bundling

Fix icon conflicts

Hide tags in collapsed reply threads

Close #1412

This will reduce the chance of styles bleeding in from the parent
document.

Previously this generated a large amount of invalid unused css due to
nesting pseudo classes.

This allows the icon name to be changed freely without having to
update unrelated markup or stylesheets.

This should reduces the chances of style conflicts when annotator
content is injected into a host site. This pull request also ensures
all icons use the private use area of the unicode range[1].

[1]: http://en.wikipedia.org/wiki/Private_Use_Areas

Tweak the way we organize our asset bundles for fewer output files,
straightforward names, and no conflict of dev and prod output files.

- Break session and helpers into their own bundles.

- Bundle vendor libs up where they are not common to more than one
  optional component. For example, angular-bootstrap is only needed by
  helpers since that is where we now redefine tabbable and create
  the tab-reveal directive (in a new helpers/ui-helpers.coffee file).
  Another example is angular-resource, which is only used by the session
  bundle. On the other hand, angular-route is used by the app, but soon
  also by the auth bundle as soon as we unify all the login forms and
  boot out deform.

- Inline icomoon.css.

- Rename some outputs:
  - hypothesis-app.{css,js} -> app.{css,js}
    This is the main site application.
  - hypothesis-inject.{css,js} -> hypothesis.{css,js}
    This is the inject script.

Close #1555
Related to webplatform/notes-server#13

Fix search on standalone pages

Using the searchbar will perform a stream search

Fix #1494

Extensible link and meta tags in base template

Auth isolation

Limit the markdown toolbar for tight spaces

Rather than support the fiddly matrix of possiblities when a user
may not have a session with the application but has a session with
the identity provider, borrow the newer "Goldilocks" API design from
upstream where the application is responsible for its own session
and the BrowserId implementation is less stateful.

This is in preparation for using the so-called "Goldilocks API" of
Persona where we manage the session ourselves.