Don't redirect to /login if authentication is required

We can just serve the login page in place.
Use the alert class for flash messages
Show sign in as success
Prevent Persona users from setting a password
Show a user's roles in the preferences page
Some escaping
Fix legacy login
Fix audience URL
Link to both the Persona and legacy sign in