rework how we decide when to ask about computer ownership: no is sticky for 24 hours.  only ask if it's been 1 minute since we first saw the user (not on the first login).  also defend against garbage in localstorage.

fix bug where we wouldn't know the userid immediately after authentication.  return userid from authenticate_user api and set it upon successful auth.

* Adding checks for all expected navigator.id based functions.
* pick_email.js - Get rid of the "remember" tests
* state.js - Check that authenticated redirects off to "email_chosen"
* user.js - get rid of the setPersistentSignin, change removePersistentSignin to logout.
* xhr.js - Look in the stringified JSON for the csrf token.

fix unit tests - autenticate_user and cert_key now require a boolean 'ephemeral' value which will affect duration of authentication and certificate validity respectively.

fix transition after answering the 'is this your computer' question - automatically complete signin after answering

when certifying secondary certs and the user has not confirmed their ownership of the given computer, certify with a short validity period

wire up buttons of 'is this your computer' - functional but needs work (an extra click, figuring out all the places to ask the question, etc)

use a 'wait' screen for the is this your computer question, needs styling and yes and no buttons to do the right thing

at authentication time, if the user has not confirmed ownership of a computer, set a shorter auth period.

send up ephemeral bit when authenticating with primary-issued assertion as well as when authenticating with a password

keep a list in local storage mapping email addresses to userids so that we can understand what the appropriate authentication duration should be before a user authenticates (thanks @ozten for the idea)

upon return from session context with a set userid, remember that the user has used browserid on this computer so the next time we can ask them if they'd like to stay signed in.

add to storage.js functions related to managing our knowledge of users that have used this computer and users that have confirmed ownership of this computer - for the purposes of setting optimal authentication durations

return userid as part of session context, providing a key off which we can build shared computer support

partial implementation of issue #1196 - add a 'logout of all websites' button on manage page, and implement monitoring of change of login state via polling (IE8) or storage events (everyone else at the party) - fire logout events when the user logs out.

when setLoggedInUser is used, surpress events when the site's notion of a logged in user is the same as that of browserid

purge all references to old persistent/remember me functionality - create local storage that keeps track of where you're logged in - wire up login/logout events to fire as appropriate on page load

revert accidental inclusion of 'AOK' in console output reporting web requests during dev - issue #1255

close #1133
close #1261
close #1262
close #1272
close #1274
close #1275
close #1286
close #1300
close #1304
close #1305
close #1306
close #1309
close #1310
close #1311
close #1313
close #1314
close #1315
close #1316

issue #1316

issue #1314.

issue #1315

* Fix "We just sent an email to that address" tooltip being partially cut off on mobiel. issue #1309
* Fix "wait, delay, and error" screens not being shown on mobile at appropriate times. issue #1306

* Remove top box-shadow on input elements on iOS devices. issue #1313
* Make sure "Cancel" button is in correct place when user has to enter their password after picking an email address. issue #1310
* Make disabled input elements readable on iOS. issue #1311

* Change the layout so that the entire form area gets the scroll bar for languages that use a lot of text or if the user has a lot of email addresses.
* Change the way the privacy policy and buttons are rendered so JS is not needed to set the width of the privacy policy.
* Put the TOS on its own line.
* Put "Always sign in using this email" on its own line
* Change the order of the "Forgot your password?" button and "password" label so that Germanic languages render the entire thing on one line.
* Remove the "Sign in using" header text.

issue #1300
issue #1286
issue #1275
issue #1274
issue #1272
issue #1262
issue #1261