qa-include/app/page.php can now be require()’d without side effects.
Closes #213.

Fixes command-line issues e.g. running unit tests

Fix visibiliy of option_allow_private_messages in admin page

Keep ‘qa-top-users-item’ class, use wrapper class for each page type.

Fix unencoded URLs not being detected when closing questions

Do not log security form violations unless in debug mode

Fix a_unselect not being called when hiding selected answer

Fixes #443.
Extract output buffering to function.
Use regular buffering if gzip option not set.
Use buffering in AJAX requests, to avoid “headers already sent” warning
in some situations.

Fix session_start after output started

Fixes #439

Let user input a confirmation code manually