Use data protection provider that comes from the app builder.
- Remove DefaultProtectedData, and use the DataProtectionProviderProtectedData
  instead. If none available then fallback to Dpapi provider.
- Updated NuGet packages.

#2013
Replace protected data after registration
Update packages
- Unify katana packages to use the same version
- Updated to use JSON.NET 5.

#1932
Remove web.config section for ramfar.
Reworked self host test host to use the new version of katana.
- Remove custom basic auth middleware and use katana version in tests
- Return 401 instead of 403 when unauthorized so that auth middleware can take effect.
- Generate random guid when the application instance name if null.
Used same base class for OwinTestHost and MemoryTestHost.
Handle unsuccessful status code the same in MemoryHost.
Use IIS express instead of httplistener for websockets basic auth test.
Merge branch 'release' into dev

Conflicts:
	build/Microsoft.AspNet.SignalR.versions.targets