Fix "IE doesn't keep you logged in between restarts (or page reloads)" p...

Without P3P headers set, IE is still capable of sending any existing cookies with requests to the backend.  Since cookies are sent, the authentication cookie is sent with session_context.  session_context will properly say whether the user is authenticated or not.  If the user is authenticated, emails & certs will be synced.  Any expired certs will be erased and re-certified if needed.

I give this an r+.

Fix "IE doesn't keep you logged in between restarts (or page reloads)" problems by disabling cookie check in iframe.  issue #2218 & issue #2183

improve i18n of main site - strings for translators should not include site implementation details (links, ids, etc) - this prevents accidental breakage and allows us to change our ids and links without requiring retranslation.  closes #2093

Issues 2088 and 2104

(example code) fix logout button in example primary.  we've required that folks call navigator.id.logout(), invoking the logout function with navigator.id as the this pointer.

When a secondary email is verified, make sure its verified bit is set to true.  Lots of cleanup for readability.

When the verification poll completes, if the user is not currently authenticated to the "password" level, use the staged password to authenticate the user.

If user never entered a password, kick them over to the enter your password screen.

Issue2104 verify email reset multiple browsers

audit and simplify logic in email_for_token to return proper hint to frontend on whether they should get a password from the user and forward it along with the 'complete' request during verification process for acct creation, password reset, email addition, and email re-verificaiton

Fix forgot password redirection to /signin

Fix error on too short of old password when changing password.

Update "Developer" links to point to our MDN root

Rather than going straight to the quick setup, we should link to somewhere that
gives a little more context.

* to page_helpers.emailSent, add a new input paramter - pollFuncName.  The poll functions are unique for each type of email sent.

* Generalize and cleanup unit tests

Ensure that when a user verifies in a different browser than what they reset their password with, they must authenticate to complete the verification

add access-control-allow-origin to all static resources (excluding views...

tests pass, fonts look good.  I can see the access-control-allow-origin on requested static resources.

r+

add access-control-allow-origin to all static resources (excluding views), to allow fonts to be requested cross domain.  fixes a regression introduced during the merge of router, for issue #1973

returnTo, siteName, and siteLogo only should work with the observer API.

move metrics to router: avoids headers not being forwarded and caching -...

not BrowserID, but Persona

Manually tested, tests still run.

r+

Remove extraneous params in load_gen requests

Instead of hard coding 8 and 80, use named constants.