fix sa mall possible xss in personImage handlebar helpers if the attacker had access to your root domain. fixes #3392

Login with pod_name [ci skip]

Federation logger stuff[ci skip]

cleanup session cukes

and throw in some formatting

Removed double "the" in section "Quick Start - Step 2"

Fix deprecation warning, :confirm option on links is deprecated

Use `:data => { :confirm => 'text' }` instead.

Use Rails.root.join in `spec/spec_helper.rb` to help Spork find
`helper_methods.rb` and `spec_doc.rb`.

Update Rails to 3.2.6

Rails 3.2.6 doesn't like them

Use https for git dependencies in the Gemfile

Followup to #3358

This is useful if your development and/or production setup is behind
a firewall and you can't use `git://`. Followup to #3358

Somehow heroku_san was still locked at 3.0.1 :)

fixes #3373

Rails.root and File.join cleanup [ci skip]

- `Rails.root` is a `Pathname`, so let's use `Rails.root.join`
- Clean up most of the remaining `File.join`s

show a "post is not public" message when visitor is not logged in

strip comment text upon comment creation

and tries to access a show page of a non-public post

Edited git to https for access behind firewalls [ci skip]

update heroku_san gem [ci skip]