prevent revoking invite for already active users

closes #3563
- before attempting to revoke an invitation, get updated model info
- reload route and show warning if user info has changed
Merge pull request #3593 from morficus/issue-3563

prevent revoking invite for already active users
Improve spam prevention

closes #3544
- limit forgotten password requests to five requests per IP per hour
for different email addresses
- limit forgotten password requests to five requests per email address
- limit signin requests to ten failed requests per IP per hour
- removed special treatment for tests
Cleaning up old html files
Add owner role to setup user

closes #3518
- added owner role to user that is added if no user is available
Fix embedded code being removed

no issue
- changed order of escaping
Merge pull request #3595 from sebgie/issue#3544

Improve spam prevention
Merge pull request #3598 from sebgie/fix-embedded-code

Fix embedded code being removed
Fix the author context block

fixes #3599

- If the author helper is called as a block (i.e. fn is present) then
  treat it as a with call
Ghost Logo navigation responds correctly to mobile

closes #3522
- Previously, the logo had a href attribute which was manually kept
from executing on mobile. Slow mobile devices that didn’t fully load
the JS would therefore navigate “desktop style”
- The href attribute is now set after the event handler has been loaded, ensuring correct navigation behaviour.
Merge pull request #3600 from ErisDS/author-helper

Fix the author context block
Merge pull request #3596 from sebgie/issue#3518

Add owner role to setup user
Add catch handlers to import tests.

Refs #3473
- Some tests are checking to make sure errors by using a
  catch handler on the test.  When assertions fail done()
  is never called and results in a mocha timeout, which makes
  it harder to see the cause of the failure.
Merge pull request #3590 from felixrieseberg/iss3518

Ghost Logo navigation responds correctly to mobile
Swap notification close link for a button

No issue

- Swap out notification <a> close link for <button> (gains a native hover state)
Merge pull request #3604 from PaulAdamDavis/notification-close-button

Swap notification close link for a button
Merge pull request #3602 from jaswilli/import-tests

Add catch handlers to import tests.
Fix Azure compatibility issue around stdin in Gruntfile.js
Changing User.read API to default to active users.

refs #3542
- Properly handle forgotten screen (ember)
- Change Users API to only return active users on read
- Adjust tests
Adding missing body class for author pages

closes #3606