Restored spam prevention

closes #3128
- added spam prevention middleware
- restored tests
Fix tests failing because of spam protection

closes #3128 (now really)
- added express variable disableLoginLimiter
- added disableLoginLimiter to all tests that use Ghost as module and
do authentication
- fixed isSetup not working for status other than active
- removed ‚Ensure a User is Registered‘ test as this is covered by the
new setup test
FORCE_MIGRATION ensures fixtures are added

refs #2600, refs #3296
Merge pull request #3310 from sebgie/issue#3128-2

Fix tests failing because of spam protection
Wire permmissions for notifications, mail and tags

closes #2739

- wraps the api endpoints for mail, notifications, and tags in a canThis
  check
- add internal context to internal calls
- updates tests
Fetch actual user on settings/users/user

Closes #3279

- Switch from this.session.get('user') to this.store.find('user') and
some further limiting until a custom user adapter is created
- Switch the deactivate logic to rollback the used model
- Pass the user as the model in the link-to in user list template
Merge pull request #3302 from jgable/fixUserMe

Fetch actual user in settings/users/user
Merge pull request #3312 from ErisDS/issue-2739-2

Wire permmissions for notifications, mail and tags
Turn off autocomplete for user profile form

Closes #3271
Merge pull request #3313 from ErisDS/improve-fixtures

FORCE_MIGRATION ensures fixtures are added
Add a notify action to the notifications component

Refs #3160
- gh-notifications component now takes an optional notify
  parameter.  If present it will be invoked as an action
  when a notification is added or removed.
- Add a data-notification-count attribute to the main container
  that tracks the number of "top" notification messages that
  are currently being shown.
Add class to invited users container

No issue

- Relates to https://github.com/TryGhost/Ghost-UI/commit/447c7d77ec9e532930d1f251bb42f626bebeef87#diff-acda43902fe5a16fa255b16e7b32e6d0R14
- Adds class to the invited users container, used only for spacing right now
Merge pull request #3316 from PaulAdamDavis/invited-users-class

Add class to invited users container
Fix editing author

no issue
- author_id is converted to author for API responses but was never
converted back for requests
Merge pull request #3317 from sebgie/fix-edit-posts

Fix editing author
Schema changes for Apps

refs #2465
- Add active field to app_fields
- Adjust data generator for app fields
Extending context concept to models

fixes #3275, fixes #3290, ref #3086, ref #3084

- Ensure that we use the current logged in user and not just user 1 when
- removing hard coded user: 1 except where absolutely necessary
- passing context, rather than user to models
- base model has a new function to determine what id to use for created_by etc
Prevent duplicate slug request on saving new post

No Issue
- Do not run generateSlugPlaceholder if save has been initiated
  and the title has already been set on the post. At that stage
  a slug has already been generated and another API call is not
  necessary.
Merge pull request #3297 from jaswilli/issue-3271

Turn off autocomplete for user profile form
Merge pull request #3318 from halfdan/apps-schema

Schema changes for Apps