users-admin: moved views into pyramid for editing emails and ips. - added audit-logging - added few additional tests

my-account: use audit logs for email and token actions.

my-account: moved few my account views into pyramid.

security: make sure the admin of repo can only delete comments which are from the same repo. - fixes IDOR issue - protects against other people comment deletion by repo admins.

security: use 404 instead of 403 code on permission decorator to prevent resource discovery attacks.

my-account: moved emails config into pyramid views.

security: use new safe escaped user attributes across the application. - will fix all possible XSS attack vectors.

User: use new escaped hybrid properties for usage in code. - Allows introducing the safer method of reading first/last names from users.

pull-requests: prepare the migration of pull request to pyramid. - this is half the code because of problems found during porting - partially moved the urls, and flipped the logic into pyramid code - needs more work in core for full switch.

notifications: fixed problem with 500 errors on non-numeric notification id given.