Fix users who verify an email address but are not authenticated to the correct credentials.

* No longer set a user's authentication credentials to "password" if the user completes an address verification.  A user who is authed to assertion level and verifies on a second browser must still verify their password.
* When the polling wsapi completes, if the status is "complete" but the user's auth level is not "password", change the status to "mustAuth" which will force the user to enter their password if they have not done so already.
Merge commit 'd02820f03b328053b61507a2ffa39e6a0b2acdb1' into issue_1682_verify_authentication

Merge of user.js and its unit tests.

Conflicts:
	resources/static/common/js/user.js
	resources/static/test/cases/common/js/user.js
Update the comments.
Merge remote-tracking branch 'origin/dev' into issue_1682_auth_after_verify

Conflicts:
	resources/static/common/js/user.js
Fix IE failing when authenticating with IdP from main site's /signin

* window.name is used to keep track of where to redirect the user once authentication with the IdP is complete. IE was losing window.name when redirected to the IdP because it was set from within the dialog.
* Set the window.name to auth_with_primary when window.open is called.
* Update WinChan to use the version that allows the setting of window.name
Change all references of en-US to en
initial set of contributors
adding ops, qa, ux
add deprecation warning to logout with callback

fixes #2427
add missing placeholder on INSERT statement for adding test users
statsd module should log uncaught exceptions

Fixes Issue#2440
Adds a 'base' module which should provide lowest level features
while server is starting up.
Uses winston in addition to statsd for capturing exceptions.
humans.txt as plain text
updating ejs to needed version for client compiling
/common/js/templates.js gets built dynamically in dev

The list of templates gets pushed onto a single file, with the EJS pre-compiled
into functions. Then, in the Renderer, the functions only need to be invoked,
meaning we no longer need the EJS client lib, and don't eval code.
updating templates, since <%= escapes content by default now
adding /test/mocks/site-templates.js route

this returns compiled site templates, similar to the dialog templates,
which are needed by the test suite to test the site works!
remove last instances of EJS on client-side

manage acct page uses a template, but has no
need for EJS to parse it, since it's plain HTML.
remove _.template usage

_.template uses new Function, which means evalling code
evalling code is bad. so now we don't do it.
compileDebug should be false is minified
update static resources test since ejs is gone