add new global config settings to disable ssl and allow for public facing host name
resx for new global settings
honor disable ssl global config setting
use public host name setting
update oauth2 library so we can set origin for callbacks to public host name
add DisableSSL migration
disable ws-trust mixed mode endpoints if ssl is disabled
fix compliation issues
fix compliation issues
fix in adfs bridge to address saml2 bootstrap tokens obtained via saml2-p
Merge branch 'nossl'
disable tracing by default
rework tracing messages
add anti-forgery to login
add paging support to user admin page
PasswordStrengthRegularExpression bug fixed, ValidatePasswordStrength re-factored 

1] while PasswordStrengthRegularExpression checking using IsMatch method, the input password was passed as second param and pattern was passed as first param. IsMatch requires input as first and pattern as second param.

2] Re-factored ValidatePasswordStrength code from SetPassword method, making it more readable.
IE cached ajax response as noted in Issue 422

IE cached ajax response as noted in Issue 422. 

"When using IE 10.0.9200.16580 and I click Generate for a new Symmetric Signing Key, I continually have the same key returned for all of the different RPs.

This is not an issue in Chrome, where I get a new key every time I click the button."
IE cached ajax response as noted in Issue 422 Update

Fixed the issue of missing comma in script. The issue got created while fixing as per subject.
add anti-forgery to initial config page
fix HRD bug when RP passes wreply