Rather than going straight to the quick setup, we should link to somewhere that
gives a little more context.

add access-control-allow-origin to all static resources (excluding views), to allow fonts to be requested cross domain.  fixes a regression introduced during the merge of router, for issue #1973

Allow assertions issued by person to be used to authenticate.  This makes it possible for "proxy idps" to work without the implementation details leaking out into others verifier implementations.

gettextify the last portion of the about page.

add test coverage of origins that start with digits, and relax validation regex a bit - closes #2042

extensive testing of i18n mechanism - including english fallback, string substition from .json files, and debug locale

* in each top level layout or ejs template, include a link to a partial that contains the license.
* The bottom of the license contains a link to the repo and the current SHA's commit.

perform rigorous validation on all API parameters, cleanup redundancy in sanitize.js and validate.js - issue #1526

Signed-off-by: Lloyd Hilaiel <lloyd@hilaiel.com>

Remove email throttling from stage_reverify.  Because authentication is required for this call it is not neccesary

rename the 'add email' email we send out to 'confirm', and use it in both the email addition case, and the email reverification case.  This is more about semantics than behavior change

Generalize error-display to extended-info.  For every "screen" that is shown, create an extendedInfo and instantiate it.  Remove the "error-display.show" code that was in page_helpers and page_module.

issue #1916

issue #1871
issue #1937

* Add a new module called dom-helpers with function makeEqualWidth.
* Force buttons on the "Is this your computer" screen to be the same width.
* Update CSS enable button width to be set this way.
* Update CSS to vertically center helper text.
* Update CSS to make the buttons look good in mobile.

issue #1932