feat(client): Smooth out the verification flow.

* The original tab always automatically completes the oauth flow if it is open when the email is verified.
* If a second tab is opened in the same browser, do not show the user a link to continue back to the RP. The user has to return to the first tab. This is a requirement by Marketplace.
* If the user verifies a new account in a second browser, show the service name, but do not allow the user to click back to the RP.
* If the user verifies a password reset in a second browser, force the original tab from the first browser to enter their password to allow the user to complete the flow.

For password reset users who verify in a second tab, we need a way to pass the unwrapBKey/keyFetchToken generated in the new tab to the old tab. localStorage is used as the cross-tab communication mechanism since no reference to the old tab can be obtained. The cross-tab communication is done via a library called crosstab.

fixes #1723
Merge pull request #1725 from mozilla/issue-1723-oauth-completion-improvements

feat(client): Smooth out the verification flow.
Release v0.23.0
feat(client): Create and send a resume token to the OAuth server.

The `resume` token isn't actually used at the moment, this is setting us up to verify in a second browser. The resume token only contains the `state` token passed by the OAuth RP.

fixes #1623
fix(styles): Ensure the year of birth select box uses Clear Sans.

The `.select-row select` style declaration did not include the "fonts()" mixin which is required to override the system set fonts.

fixes #1707
fix(client): Add a "forgot password?" link when using cached credentials.

fixes #1632
Merge pull request #1744 from mozilla/issue-1707-down-with-lucida

fix(styles): Ensure the year of birth select box uses Clear Sans.
Merge pull request #1743 from mozilla/issue-1632-password-reset-cached-creds

fix(client): Add a "forgot password?" link when using cached credentials
fix(client): Change the "Next" button to say "Sign up"

fixes #1714
Merge pull request #1754 from mozilla/issue-1714-sign-up-button

fix(client): Change the "Next" button to say "Sign up"

Fixes #1714
r=ckarlof
Rename "toResumeToken" to "getResumeToken". Always send the resume token on signup, even if using a preVerifyToken.
Merge pull request #1646 from mozilla/issue-1623-resume-to-relier

feat(client): Forward the `resume` token to the auth server

@ckarlof is happy and gave the r+. Travis is happy and shows green. I'm happy.

Merging.
chore(build): updating to intern 2.1.1
chore(build): Add a way to build production with non-min JS
Merge pull request #1762 from vladikoff/intern211

chore(build): updating to intern 2.1.1
Merge pull request #1763 from vladikoff/issue-1759-non-min-version

chore(build): Add a way to build production with non-min JS
fix(test): Fix `test-latest` functional tests.

Several problems:
* When running against remote servers, Selenium moves very quickly.
* The email index being searched for was not being passed to restmail, so it would return as long as one email existed.
* OAuth tests depended on each other
* Signing out of 123done was not done correctly and state would hang around.
* Clearing content server state was being done before the content server was loaded, which ended up in a 500 error.

What we do now:
* Simplify the OAuth sign in tests so there is no cross-test dependencies.
* In the OAuth sign in tests, use the FxaClient to pre-generate users. We are testing sign in, not sign up.
* Ensure the content server page is loaded before clearing its state.
* Ensure the user is logged out of 123done when clearing its state - do so by calling XHR requests directly.
* Ensure the index of the email we are waiting for makes it to restmail.

fixes #1690
Merge pull request #1742 from mozilla/issue-1690-sync-reset-password-test

fix(test): Fix `test-latest` functional tests.
fix(oauth): use the correct client_id for local oauth server
chore(l10n): update templates with latest strings