At the moment you can perform cross-site request forgeries,
cross-site scripting and similar things on MediaGoblin pages.

Comments to MediaEntry objects should be possible

I think we don't need to do complicated threading for now. Just
comments which are paginated. Restricting to users registered on
that site for now is good enough. We'll want more than that
eventually, but for now it's okay.


-  Just simple flat comments, no threading (yet)
-  Just comments by logged in, active users
-  pagination of comments! Sorted by comment time, obviously.
-  Don't embed the comments, make the comments link back to the
   MediaEntries via their ObjectIds

That's it :)

Similar to
`http://bugs.foocorp.net/issues/362#note-2 <http://bugs.foocorp.net/issues/362#note-2>`_
we should have descriptions be in markdown, and then we should
prerender them and display that prerendered niceness.

::

    >>> entry['description'] = 'I am *soooo* hungry!'
    >>> entry.render_body()
    >>> entry['description_rendered']
    u'<p>I am <em>soooo</em> hungry!</p>'
    >>> entry.save()