Inline auth form errors
Color borders for valid/invalid form field states
Auth controller no longer needs flash service
Show form-wide auth failures inline

This is a step better than flash messages. It could be reworked to
inline above the submit button, or elsewhere, easily by changing the
template.
Return auth failure reasons as form-wide errors

This avoids flash messages for common errors such as bad credentials
and shows them inline instead.
Return a 403 code on bad CSRF token
Merge pull request #1279 from hypothesis/improved-form-errors

Improved form errors
Delay authentication timeout on scope updates

Fix two issues with the authentication timeouts.

- Fix #1284, the regression causing resets to always occur, introduced
  by e4f32116fe5f266e2030a666f5cc912b6b3df308
- Flash a message when the reset happens. Close #1280
- Increased the timeout to five minutes, as per suggestion by @dwhly
Open socket after session, not delay

It makes a lot more sense to start the websocket connection as soon as
the session is loaded, rather than using an arbitrary delay time of
five seconds.
Reset the websocket after auth changes

Fix #1286
Merge pull request #1287 from hypothesis/websocket-tweaks

WebSocket tweaks
Merge pull request #1285 from hypothesis/1280-auth-form-timeout

Delay authentication timeout on scope updates
Add and register the debugtoolbar package

This now renders stack traces in the browser rather than the vauge and
unhelpful "Internal Server Error" message. This is a godsend when
trying to debug issues with SCSS files.
Merge pull request #1293 from hypothesis/debugtoolbar

Add and register the debugtoolbar package
Start building up a pattern library

Starting with the form elements, the new view is available at
/dev/pattern-library and currently only shows form fields.
Move pattern library view to h.testing

This ensures that it's only loaded in development.
Add experimental form styles

These new styles include labels by default and error styles. It also
gives a little more breathing room between form elements.

The buttons now have a more consistent hover/active state without the
glossy highlight and the disabled state looks disabled.
Add forms.scss to the assets.yaml
Update the login form to trial new form styles
Use Compass for button gradients