security: fixed tests.

security: escape always the provided user data like firstname/lastname.

security: fixed XSS inside the tooltip for author string.

predicates: skip route matching for vcs type calls.

emails: fixed qualified url in user registration email.

core: improve attach context attribute to rely strictly on already provided user.

auth: re-use the get_current_request in fetching request in decorators. - will later help porting to pyramid

home: moved home and repo group views into pyramid. - fixed lots of tests related to those changes - now main and subrepo group views are handled by pyramid.

nix: update default.nix to be consistent with ordering with vcsserver.

auth-plugins: updated description on auth_ldap plugin servers.