Makes debugging more difficult and uses up extra CPU cycles for no real security benefit.

* Use font from variables
* No need to load bourbon twice

Also, store the returned `stanza-id` on the message.

Updates #324

This reverts commit 01f0a652.

Updates #1410

Don't check for older messages with same msgid
we can't rely on a message's `id` attribute being unique.

Also, remove `createMessage` in favour of calling `messages.create` directly.

updates #1405

Fixes #1405

Updates #1442

* change jcbrand to conversejs in releases links

- Combine all test init functions into `initConverse`
- Use `async` functions in more tests
- Replace `var` with `let` and `const` in more tests
- New utils method `toStanza` which converts a string to a Node

'dependencies' in package.json get installed as well when installing
converse.js or @converse/headless in a 3rd party project, which is
unnecessary.

And fix an extra space added by mistake by the sed command on
_converse.VERSION_NAME in converse-core.js.

Add the version to the archive name so it also fixes #1375.
Remove the recipes for css/webfonts.zip, sounds.zip, and locale.zip.

Fixes #1414

Fixes #1431.