Introduce disclosure document for all third party integrations
Setup hijacks owner user

closes #3074
- user generated by fixture is hijacked
- user is updated with name, email, password, slug and status
- creates new user if db is migrated but no user exists
- previously removed tests are back
Merge pull request #3236 from sebgie/issue#3074

Setup hijacks owner user
Fix handling of async db calls in fixtures

Closes #3167
- Change fixture loading methods to keep track of promises
  returned from async database calls so that aggregators function
  correctly.
Merge pull request #3240 from jaswilli/issue-3167

Fix handling of async db calls in fixtures
Merge pull request #3064 from JohnONolan/privacy

Introduce new PRIVACY.md document
Upgrading bookshelf to 0.7.6 & knex to 0.6.21
Migration improvements

refs #2600

- fixed issue with defaults not being populated on upgrade
- added logging to all actions in the migration process to help debugging
  in future
Separating fixtures from logic
Split permissions fixtures from other fixtures
Removing references to ids

- try to make migrations more robust by fetching the objects we've added, rather than relying on ids
- user isn't needed for adding
- changed owner fixture slightly to remove any confusion between the 'Owner' role and 'Ghost Owner' user.