Security update

Resolves SA-CONTRIB-2017-005.

This release requires the PHPMailer library to be downloaded and installed separately, without doing so it is possible this update may break the site; see the included README.txt and README.md files for full details.

See Autocomplete Deluxe - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-003. Fixed terms not beeing escaped properly in JS code.

Doubleclick for Publishers (DFP) - Less Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-002

Permissions by Term -- Critical - Multiple vulnerabilities - SA-CONTRIB-2017-001

- Fixes critical security bug: Enabling the module gives access to all unpublished nodes as anonymous user - thanks to the Drupal security team for assisting in the fix and thanks to user cedric_a for reporting the issue.

Fixed critical issue with publishing "all" unpublished content after enabling PBT. Thanks to user cedric_a for reporting via security.drupal.org!

1. #2792375: Term references not translated
2. #2833531: XSS vulnerability in "level_labels" configuration field