rework oauth

Sanction actually makes things more complicated than it needs to be
When you look at the simplicity of the oauth protocol, better do its own implementation

Add e2e tests to verify that the negociation actually works against the real bearer

Signed-off-by: Pierre Tardy <tardyp@gmail.com>
some more fixes for oauth2

- Add some more customization (option to skip ssl verif for dev)
- some oauth2 do posts instead of get for their redirect_url
- add autologin capability, so that UI enforce the connection to oauth server
- fix logout for oauth

Signed-off-by: Pierre Tardy <pierre.tardy@intel.com>
ldap: use python3-ldap instead of python-ldap

python-ldap needs a c library
while python3-ldap is pure python

pure python is prefered for simplification of deployment with pip
(no need to apt-get builddeps, works better with paas)

unlike its name is suggesting, it support python 2

Signed-off-by: Pierre Tardy <pierre.tardy@intel.com>
remove spurious heading
fix example mergeRequests function
minor unittests fixes

Signed-off-by: Pierre Tardy <tardyp@gmail.com>
Merge branch 'master' of github.com:buildbot/buildbot into oauth
default to 127.0.0.1 for buildmaster
adding option to log directly to stdout
PEP8 style fixes, made some defaults more explicit
bugfix, 'changes' may not be defined
reject non-push events
use method over property
adding check for X-Hub-Signature
fix exception logging and respond to the request with the error
remove unused import
adding response to github's requests
adding --auth for PB, some minor cleanups
minor logging fixes
added missing response to github