Removes alerts for missing permissions.

These appear to not be thought through w/ anonymous users. Those have
little rights, and can see no timeline w/o reportings rights. This
leaves the X-Reason header in the server side, since I'm not sure that
there isn't an API client depending on it.
Changelog.
Merge pull request #691 from opf/feature/remove-login-alert-3061