- refactor Mailer class to allow unit tests to access token
  replacements
- use CRLF in signature string per rfc2045 6.8
- add email signature to the expected mail body
- apply appropriate chunksplit to the expected mail body
- ensure regex is quoted - '/' is a legal base64 character

mailwrap.html is back

@EMAILSIGNATURE@ added

Additional bug fix

Done:
Cleanup of the mail text signature.
The signature is deleted from the txt files and moved in to lang.php
Mailer.class.php updated to insert the signature

Fix:
- Cleaner text
- no more "-- "  "--" "---" "----" problems.
- mailwrap.html is not needed anymore an can be deleted (?)

Changed files in all languages:
lang.php
mailtext.txt
password.txt
registermail.txt
subscr_digest.txt
subscr_list.txt
subscr_single.txt
uploadmail.txt
pwconfirm.txt
showrev.txt

delete?:
mailwrap.html

Update toolbar.js

Translation update (ne)

When the picker button is near the border of the screen, then an opening panel of picker buttons can go over the screen edge. That's not convenient. So we should add a check in a `function pickerToggle()` and shift picker buttons position if needed.

Test

indexer.php: slow page loads on lighttpd due to missing ob_flush()

it seems that different zlib versions behave different with corrupted files.
Some return false, some return whatever they still can read from the
file. the file now should no longer be readable by any version.

The user properties (login, real name, etc) where not properly escaped
in the user manager's edit form. This allowed a XSS attack on the
superuser by registered users.

Thanks to Filippo Cavallarin from www.segment.technology for discovering
this bug.

This also reverses the order of crypto protocols tried again. Using TLS
first again. related to #915

The code reading .bz2 compressed files did not correctly check for
possible read errors. In case of a corrupted file this could have led to
an infinite loop.

Thanks to Filippo Cavallarin from www.segment.technology for dicovering
this bug.

Translation update (he)

Translation update (da)

Add two config options to authldap

Get total number of users in ad, needed for paging

Since we cannot effectively filter for groups and have to work with
incremental prefetching, the ``last`` button is mostly broken/buggy.
Hence it is disabled in this usecase.

While Browsers (IE of course) still fail to accept the correct
application/javascript mimetype in the type attribute of the script
element, we should serve the scripts with the correct Content-Type
header at least. This is especially important as the default
configuration of mod_deflate expects application/javascript and will not
compress text/javascript.

attribute holding the username, 'modPass' allows to disable
password changing by the user.

simple fix for pageID clash with sidebar in mobile view

Translation update (fr)