MOAR CAPYBARA

Coverage of remaining vulnerabilities that seemed simple to cope with. I think password complexity is not covered yet.

I also introduced a toggle for the Capybara specs to handle running from the Maintainer context (wants the vulnerabilities to exist) and the Trainee context (wants the vulnerabilities fixed). See 911a52e for more details.