audit API access and writes

- refactor api_spec to use lets
- api_access audit of GET's
- api_write audit based on model before_save hook w/sweeper
Move classes and modules in lib/audit/user_action.rb to their own files
Merge branch 'devel' into feature/audit_api_access

Conflicts:
	lib/audit/user_action.rb
Merge remote-tracking branch 'origin/devel' into feature/audit_api_access

Conflicts:
	app/models/user_action.rb
	db/schema.rb
Merge remote-tracking branch 'origin/devel' into feature/admin_role
Create Admin Page

Create an admin page that allows admins to see applications with pending public requests. Admins can click through to the application edit page, which (for admins) shows a dropdown for modifying public/private state. Admin is navigable from dropdown and profile nav.
explicitly require site prism section files
Create ErrorsController for 4xx errors, update 5xx css
Merge branch 'devel' into feature/error_pages
Treat 401/unauthorized as 404
Merge pull request #417 from 18F/feature/error_pages

Create ErrorsController for 4xx errors
Merge branch 'devel' into feature/admin_page

Conflicts:
	config/routes.rb
	spec/support/page_objects/admin_page.rb
	spec/support/page_objects/profile_page.rb
Force mobile recovery flow when 2FA is requested and user does not have mobile #
Merge pull request #413 from 18F/feature/admin_page

Feature/admin page
Remove acl9, replace with SimpleRole

acl9 gem is a little bit opaque, had (at least one) rails 4.1.x incompatibility, and its tests are written in a convluted style with Test::Unit. Since our needs are simple (see what I did there?), rewrite, as SimpleRole, only implementing the methods that we use, and hardcoding (would be simple to generalize, but there is no need) class names for associations.
Rename `has_role!` to `grant_role!`

Also, add tests, remove `has_role_for?(...)`, since it isn't used.
Remove owner association

Since we have roles now, just use that to show ownership of applications
add `revoke_role(...)`
Merge branch 'devel' into feature/audit_api_access

Conflicts:
	app/models/user_action.rb
	db/schema.rb
Merge pull request #394 from 18F/feature/audit_api_access

audit API access and writes