fix script/server sanity checks

fix sanity checks in script/server, remove migration check because it is too slow and Rails 4 checks it on first request anyway

Fix unconventional image asset inclusion in css asset

fix broken output of script/server

use camo for medium and small avatars

encode unencoded urls and normalize IDN urls

fix notification mails for limited posts

GET requests don't get any CSRF protection by Rails,
thus these sensitive actions should be better protected.

Thanks to @tomekr for the report.

Also redirect to it for download, for Amazon S3
compatibility.

Prior to this patch an attacker could obtain an
users export by guessing the filename with a high
chance of success. Fully authenticating the
download request is a lot harder due to our diverse
deployment scenarios.

This brings the used method in line with the photo
export feature.

Thanks to @tomekr for the report.

add mumble protocol to linkify

also use double-quotes in the whole file

fix not_public page

Remove 'manage services' link in standalone mode

Use Bootstrap modal for new aspect form

body was rendered in the head

fixed service-icons in sidebar

recovered css from old application.scss

was removed in e188782a

fix control icon alignment in chromium browser