Move `Forbidden` exceptions to `RECOVERABLE` group

Previously the Forbidden exceptions raised by clients were classified
as UNAUTHORIZED. This classification is not entirely correct, as
the UNAUTHORIZED group of exceptions implies that the user should be
logged out and forced to log in again. This, however, is not the case
with Forbidden exceptions. Thus, it is more appropriate to place the
Forbidden exceptions into the RECOVERABLE group.

Change-Id: I7e52ed72d66e9d0496bc07036e48c968e7a66c2e
Closes-bug: #1299126
Add "new in" tags to docs for new Icehouse settings

Also re-alphabetize settings list

Change-Id: Ieb47e9f2a0be4906a744970a9d17dd5177e59fc0
Partial-Bug: #1300710
CSV Download button from Daily Usage Report

Generates CSV file with the same contents as the Daily Usage Report

blueprint csv-daily-usage
Change-Id: Iedf76a7293d612d4e23dfc60e060822b89afa9be
Fix hide drop_arrow.png if only one tenant

when user only in one tenant, the tenant region show drop_arrow.png,
this will confuse user. It needs to hide.

Closes-bug:#1316471

Change-Id: I9f1fefcc6a23e6e6a555a59df6ae7f50d65edbe2
Merge "Move `Forbidden` exceptions to `RECOVERABLE` group"
Merge "Add "new in" tags to docs for new Icehouse settings"
Merge "CSV Download button from Daily Usage Report"
Merge "Fix hide drop_arrow.png if only one tenant"