Introduce disclosure document for all third party integrations
Owner has all user permissions

closes #3075
- added special treatment for role with name ‚Owner‘
Move post slug endpoint & add endpoints for users

closes #3187

- move slug endpoint to post/slug/:slug
- create similar  slug and email endpoint for users
- add/update tests
Merge pull request #3227 from sebgie/issue#3075

Owner has all user permissions
Merge pull request #3223 from ErisDS/issue-3187

Move post slug endpoint & add endpoints for users
Fix active theme selector.  Add validation to API.

Closes #3226
- Remove dependent property from the computed content property
  that is used to build the active theme selector.
- Add validation to the Settings model so that it rejects
  attempts to set an activeTheme that is not installed.
Removed duplicative and unreferenced resources section
Add owner fixture

closes #3073
- added fixture for owner role
- added fixture for initial user (new db)
- added conversion administrator -> owner (existing db)
- changed tests to take over owner user
- removed some functional tests until /setup works with owner user
Merge pull request #3231 from jordansexton/patch-1

Removed duplicative and unreferenced resources section
Merge pull request #3235 from sebgie/issue#3073

Add owner fixture
Merge pull request #3230 from jaswilli/issue-3226

Fix active theme selector.  Add validation to API.
Move creation of knex instance to config module

addresses #2170
Only reference model properties through the models module.
This frees us up to enforce one single point of access, thus paving
the way towards allowing us to initialize the models at are request,
and not when it's require().

addresses #2170
Fix slowdown of tests by reverting back to using knex in test/utils
Setup hijacks owner user

closes #3074
- user generated by fixture is hijacked
- user is updated with name, email, password, slug and status
- creates new user if db is migrated but no user exists
- previously removed tests are back
Merge pull request #3236 from sebgie/issue#3074

Setup hijacks owner user
Fix handling of async db calls in fixtures

Closes #3167
- Change fixture loading methods to keep track of promises
  returned from async database calls so that aggregators function
  correctly.
Merge pull request #3240 from jaswilli/issue-3167

Fix handling of async db calls in fixtures
Merge pull request #3064 from JohnONolan/privacy

Introduce new PRIVACY.md document
Move setup to API

closes #3136
- moved setup to authentication API
- added `POST /ghost/api/v0.1/authentication/setup` to execute the
setup process
- added `GET /ghost/api/v0.1/authentication/setup` to check if blog is
already set up (needed for #3145)
- removed unused methods from api/users.js