Add hidden form field support to form API
Cleaner notification service instantiation, and ensure defaults get applied by using 'add' when notifications come over the wire.
hook $config can now return promises
Fix user redaction
Pass token to rpc://user.reset