add support for using an absolute path to override an asset

fixes #1229
Merge branch 'master' into feature.override-asset-with-absolute-path
Docs: Introduce the concept of "userid" into the glossary.
Docs: Make clear that a userid need not be a principal.
Security: Change "principal" argument in security.remember() to "userid".

Make the change througout the authentication policies, etc. as well.
Docs: Make "userid"  link to the glossary term.
Docs: Include the concept of credentials in the high level security overview.
Docs: Add resource tree into security overview.
Docs: Switched first 2 paragraphs of security overview.
some tweaks to the usage of userid in the docs
Merge branch 'master' into feature.security-docs-enhancements
re-add missing Interface parent
update the public api for remember
update changelog
fixes #1405
if view argument is not passed to config.add_notfound_view, use default_exceptionresponse_view
properly detect undefined view
if view argument is not passed to config.add_forbidden_view, use default_exceptionresponse_view
Merge pull request #1446 from iElectric/guess_mimtype_test_fix

fixes #1405
update changelog