* Adds support for SVG
* Higher prio for icons in newer folder location

* CLI scripts
* ezcomponents library (only used in one CLI script)
* tests (based on PHP 5.4 they aren't working any more)

Since we call the SOAP endpoint for certain actions
of an authenticated user on extensions.typo3.org
(like registering ext keys) and we do not know
the password at this point any more,
we now include the session id in the SOAP request,
so that TYPO3 will login this user before the SOAP
endpoint is triggered.

In the endpoint, we can then just check if a user is
already logged in and whether the username given
matches the username of the logged in user.

Prevents sql errors on writing to database

By having an inverted condition, attackers
could upload arbitrary extensions by only knowing
the username and the extension key.

When knowing a username of a TER admin,
it was also possible to perform TER admin
commands (like deleting extensions) via SOAP