switch icons for quiz stats low score and std deviation

fixes CNVS-13620

test plan:
  - enable draft state and quiz stats
  - as a teacher
    - create a quiz

  - as a student
    - take the quiz

  - as a teacher
    - view the quiz stats page
    - in the summary section: low score should be a down arrow, stddev is a star

Change-Id: I1c0bbd57cab9316ed9f61e72c55e44527f25b171
Reviewed-on: https://gerrit.instructure.com/36418
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jason Madsen <jmadsen@instructure.com>
QA-Review: Caleb Guanzon <cguanzon@instructure.com>
Product-Review: Derek DeVries <ddevries@instructure.com>
extract ember submission arrows to mixin to use on both teacher/student results

fixes CNVS-13633

test plan:
  - enable draft state and quiz stats
  - as a teacher
    - create a quiz with some questions and allow students to see results
    - take the quiz and get some correct, some incorrect
    - you should see arrows showing which are correct/incorrect

    - preview the quiz and get some correct, some incorrect
    - you should see arrows showing which are correct/incorrect

  - as a student
    - take the quiz
    - you should see arrows showing which are correct/incorrect

Change-Id: Ic275b386df84c5b1e6ca5930f345a524de38bbee
Reviewed-on: https://gerrit.instructure.com/36439
Reviewed-by: Jason Madsen <jmadsen@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
QA-Review: Trevor deHaan <tdehaan@instructure.com>
Product-Review: Derek DeVries <ddevries@instructure.com>
enable CSRF protection for logout

No longer allow GET requests to /logout

There were a few places in the app that were doing GET requests to
/logout, as well as some tests, so I fixed those to do a proper DELETE
request.

test plan:

  * Make sure you can log out through the web ui
  * Make sure that the cancel/logout buttons still work properly on:
    * The accept terms of use page
    * The self-registration page
    * The "already enrolled" page that you see when you click an
      enrollment invite for one user while logged in as another user
  * Make sure that SAML and CAS log outs work as well

fixes CNVS-12163

Change-Id: I6a0a520745a21b349d36b004bceccbb0ff2c8503
Reviewed-on: https://gerrit.instructure.com/32723
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Cody Cutrer <cody@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Brian Palmer <brianp@instructure.com>
update ic-ajax

Change-Id: I21e0181db69fd846bbbdc38bfaa5b74c56ee2699
Reviewed-on: https://gerrit.instructure.com/36277
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jason Madsen <jmadsen@instructure.com>
Product-Review: Ryan Florence <ryanf@instructure.com>
QA-Review: Ryan Florence <ryanf@instructure.com>
use all paginated quizzes in ember index

closes CNVS-13628

test plan:
  - enable :quiz_stats
  - visit quiz index with more than 20 quizzes
    - verify that first 10 load
      - loading spinner will display at bottom of first 10 records
    - remaining quizzes should then load and display
      - spinner will remove once all pages are loaded

  - visitin quiz index with less than 10 quizzes
    - bottom spinner should not be visible

Change-Id: Ie2d6989b6ad68782d50c0491cd0fd3a761976577
Reviewed-on: https://gerrit.instructure.com/36437
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Derek DeVries <ddevries@instructure.com>
QA-Review: Caleb Guanzon <cguanzon@instructure.com>
Product-Review: Jason Madsen <jmadsen@instructure.com>
interpolate user's global id in announcements

fixes ALYT-37

enable site admins to interpolate a Canvas user's
global ID in announcements using the string
{{CANVAS_USER_ID}}. This is similar in function to
what site admins can currently do with the account
domain (using {{ACCOUNT_DOMAIN}}).

Since there are only two possible substitutions, we
just gsub the notification message when displaying
it. If we continue adding more potential substitutions,
we will need to be smarter about how we handle such
overrides.

Test plan:
1) Create a new announcement on site admin, sending
to all users and using the string {{CANVAS_USER_ID}}
as part of the message text
2) Log in as two different users and verify that for
each, the appropriate user ID is used in place of
{{CANVAS_USER_ID}}
3) With sharding is enabled, it should be the global,
not the local ID, that is displayed.

Change-Id: Ia7d39f26d5916637cda133ceddc7fc615af83b9c
Reviewed-on: https://gerrit.instructure.com/36372
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Braden Anderson <braden@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Nick Nelson <nick@instructure.com>
add integration_data, integration_id for assignment through api

Test Plan: see SIS-281

fixes SIS-281

Change-Id: I25b7d18a7cd752826ff38d0f795cba0059b56df1
Reviewed-on: https://gerrit.instructure.com/35071
Tested-by: Jenkins <jenkins@instructure.com>
QA-Review: Jeremy Putnam <jeremyp@instructure.com>
Product-Review: Eric Adams <eadams@instructure.com>
Reviewed-by: Simon Williams <simon@instructure.com>
bump switchman

Change-Id: I329259d419fe20deb1c46ff2048bdf46bf980845
Reviewed-on: https://gerrit.instructure.com/36356
Reviewed-by: Jacob Fugal <jacob@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>
delete delayed messages before deleting cc in migration

also do notification policies in bulk for sanity

Change-Id: If32f06c073f8eb86d424b1287b3423ba212e2b43
Reviewed-on: https://gerrit.instructure.com/36472
Reviewed-by: James Williams  <jamesw@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>
don't stop CountsReport when one job fails

fixes CNVS-6375

Change-Id: I6e0631f73f8b47dc3c7d825d9f9f84f42225a33d
Reviewed-on: https://gerrit.instructure.com/36484
Reviewed-by: Brian Palmer <brianp@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>
updates to oauth docs

for token sending and manual generation

refs CNVS-13008

test plan: n/a

Change-Id: I74ad75f6fad0033b7407bcc9555ffe71451470ef
Reviewed-on: https://gerrit.instructure.com/36412
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Cody Cutrer <cody@instructure.com>
Reviewed-by: Nick Cloward <ncloward@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Brian Palmer <brianp@instructure.com>
update oauth docs for state param

refs CNVS-13008

test plan: n/a

Change-Id: Ia37c9500a47bde2ee758da331e03d3a8bdbaf7d7
Reviewed-on: https://gerrit.instructure.com/36413
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Nick Cloward <ncloward@instructure.com>
Reviewed-by: Cody Cutrer <cody@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Brian Palmer <brianp@instructure.com>
updated/added ic-* components

Change-Id: I30c3d1038dc582f5aee1316812698ac7a85c28af
Reviewed-on: https://gerrit.instructure.com/36485
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Ryan Shaw <ryan@instructure.com>
Product-Review: Ryan Florence <ryanf@instructure.com>
QA-Review: Ryan Florence <ryanf@instructure.com>
import points_possible from CC 1.3 assignments

test plan:
 - take the flat manifest attached to CNVS-13219 and find the <gradable>
   tag
 - add a points_possible attribute to it, for example
   <gradable points_possible="101">
 - import the manifest as a common cartridge
 - the imported assignment should have the specified points possible

refs CNVS-13503
fixes CNVS-13576

Change-Id: Ifc546c47cada7fcf7ec817395ceb525028406bf1
Reviewed-on: https://gerrit.instructure.com/36269
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: James Williams  <jamesw@instructure.com>
QA-Review: Nathan Rogowski <nathan@instructure.com>
Product-Review: Jeremy Stanley <jeremy@instructure.com>
new publish and un-publish course buttons

closes PS-1602

test plan:
  1. enable draft state on a course
  2. go to the course
  3. you should see the new buttons
     in the top right
  4. play around with them
  5. you should not be able to see course
     status if there are graded submissions
     in the course
  6. go to course settings
  7. you should see the course status now
     in the top right (published or unpublished)
  8. if there are graded submissions you should
     be able to hover the course status and get
     a tooltip saying you cannot unpublish
Change-Id: Idb7c27503f84eb489e1970b2061eb903e452de09
Reviewed-on: https://gerrit.instructure.com/36041
Reviewed-by: Jeremy Stanley <jeremy@instructure.com>
QA-Review: Clare Strong <clare@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
Product-Review: Jake Sorce <jake@instructure.com>
conversations: update unread count only for recipients

fixes CNVS-13639

test plan:
  * as user A, send a message to B and C
  * as user B, mark the conversation as read
  * as user C, reply privately to A
  * as user B, verify that your unread message count does not change

Change-Id: I9fbf9b7bfea507d51a95231568ec33211ddd14da
Reviewed-on: https://gerrit.instructure.com/36519
Reviewed-by: Drew Bowman <dbowman@instructure.com>
QA-Review: Trevor deHaan <tdehaan@instructure.com>
Product-Review: Braden Anderson <braden@instructure.com>
Tested-by: Bryan Madsen <bryan@instructure.com>
allow html5 fullscreen for the canvadocs iframe

Adds the "allowfullscreen" attribute to the iframe created for Canvadoc
documents, signalling that Canvadocs can open into fullscreen.

fixes CNVS-13650

test plan:
 * configure canvadocs, and view a file with it
 * verify that the canvadocs iframe has "allowfullscreen" as an
   attribute

Change-Id: I84b8b01796caa7291246dca6050ccdf13cca3813
Reviewed-on: https://gerrit.instructure.com/36503
Reviewed-by: Simon Williams <simon@instructure.com>
QA-Review: Amber Taniuchi <amber@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
Product-Review: Zach Wily <zach@instructure.com>
don't try to drop cassandra column in 1.2.x

test plan: run migrations in cassandra 1.2.x, and you shouldn't get an
error. migrations in 1.1 and 2.0 should still drop the
page_views.contributed column.

Change-Id: I18d0fc52c8a9f6e86e3f4907a0bf2e9a7aaee283
Reviewed-on: https://gerrit.instructure.com/36528
Reviewed-by: Rob Orton <rob@instructure.com>
Product-Review: Brian Palmer <brianp@instructure.com>
QA-Review: Brian Palmer <brianp@instructure.com>
Tested-by: Brian Palmer <brianp@instructure.com>
fix oauth doc typo

Change-Id: Ic4ff44f2e62ee34e49c0f5e90e3eff83cc629703
Reviewed-on: https://gerrit.instructure.com/36475
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Rob Orton <rob@instructure.com>
Product-Review: Rob Orton <rob@instructure.com>
QA-Review: Rob Orton <rob@instructure.com>
fix 2 more places we were using incorrect css3 gradients

these 2 were missed in: g/35808

fixes: #CNVS-13294
firefox can render gradients prefix-free but
all of these were using an invalid syntax for css3
gradients. The invalid syntax still works in chrome
but not firefox (or other browsers).


test plan:
make sure these look right:
1. Assignments Gradebook:Grid View 
   http://screencast.com/t/eVop4gcbogm
2. Assignments Gradebook:Grid View Settings Dropdown 
   http://cl.ly/image/1g0M203Z250c 
   (BG color on hover isn't showing)
3. SpeedGrader student dropdown 
   http://cl.ly/image/2P2g0O3I3R08

Change-Id: I35b56ae99844504b5205034138e56911653ecc53
Reviewed-on: https://gerrit.instructure.com/36215
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jeremy Stanley <jeremy@instructure.com>
Product-Review: Ryan Shaw <ryan@instructure.com>
QA-Review: Ryan Shaw <ryan@instructure.com>