check for null when mapping for embedded assets
use x-www-form-urlencoded for unit tests
added anti-forgery token support
file rename
add tests for anticsrf and incorrect content type requests
add authorization filter to verify incoming media type // fixes #445
some initial test for authorize controller/pages
allow no client id passed in signin message
add tests for filtering external IDPs based on client
add tests for filtering external IDPs based on client
add structure for permissions page to allow user to revoke tokens
XML Comments for Scope class and separation of standard scopes
Added standard scopes that always include all claims by default
Added default ctor to Token (fixes #447)
Added support for adding all claims for a user to a token (see #356)
Added a check to see if current user is still active on authorize endpoint
rework consent store to support permissions service
Merge branch 'dev' into perms

Conflicts:
	source/Core/Core.csproj
show permissions for prior consent
Fixed typo in discovery document (thanks @netchris)