tests: check that _rev is present in output

ui: use dot operator to access known object properties

tests: pass data to create_resource() and update_resource() explicitly

tests: use assertIn() for searching for an id in response

crud: split a long line

provision: use supervisor's sensible defaults more

fruitbar: don't import from flask.ext (preparing for Flask 0.11+)

fruitbar: remove trailing white space

static: update bundled backbone.shard.js

provision: add more security-related headers to nginx config