API v3 delete user
Lock down frontend dependencies w/npm shrinkwrap

Signed-off-by: Alex Coles <alex@alexbcoles.com>
Match resource links against API root

The API V3 routes tend to forget about their prefix ('api'). Manual tests showed
that the API root routes reliably set their prefix.
specify project reference as link

[ci skip]
Merge pull request #2331 from opf/feature/api_v3_delete_user

17654 delete user
Test that activity comment is a formattable
Clean up activity endpoint specs
Make activity comment a formattable
Adapt frontend to activity comment format
Merge pull request #2343 from opf/fix/api_v3_failing_resource_parsing

API V3 failing resource parsing
Merge pull request #2344 from opf/fix/specify_HAL_project_reference

Specify project reference as link
Test that activity details is a list of formattables
Make activity details a list of formattables
Adapt frontend activity details structure
Test that activity comment and details are correctly displayed
Trust html received from the back-end
Adapt spec to formattable activity comment
Adapt at leat a few activities to the formattable layout

These are by far not all entries affected that need to be adapted to activity comment/details supporting formattable.
Test that the last 3 activities are displayed on the overview tab
remove embedded section from example

- provides no indication of embedded fields of reality
- clutters the example
- makes consistent spec-changes harder

[ci skip]