rework oauth

Sanction actually makes things more complicated than it needs to be
When you look at the simplicity of the oauth protocol, better do its own implementation

Add e2e tests to verify that the negociation actually works against the real bearer

Signed-off-by: Pierre Tardy <tardyp@gmail.com>
some more fixes for oauth2

- Add some more customization (option to skip ssl verif for dev)
- some oauth2 do posts instead of get for their redirect_url
- add autologin capability, so that UI enforce the connection to oauth server
- fix logout for oauth

Signed-off-by: Pierre Tardy <pierre.tardy@intel.com>
ldap: use python3-ldap instead of python-ldap

python-ldap needs a c library
while python3-ldap is pure python

pure python is prefered for simplification of deployment with pip
(no need to apt-get builddeps, works better with paas)

unlike its name is suggesting, it support python 2

Signed-off-by: Pierre Tardy <pierre.tardy@intel.com>
minor unittests fixes

Signed-off-by: Pierre Tardy <tardyp@gmail.com>
Merge branch 'master' of github.com:buildbot/buildbot into oauth