even more spec fixing, postgres throws statement invalids for duplicate keys, luckily record not unique is a subsubclass of it so we can just catch the higher error

fix diaspora connect for the new oauth stuff WIP. There's one bug where the oauth_identifier changes but the client doesn't get informed or doesn't save it. I hope it's the last bug. Btw. this is all ugly

Add dependency status from Gemnasium to README

ms iz rendering nothing for hcard and webfinger if account is closed, not showing aspect dropdown if the user account is closed