Load portal staff-only flag from conf
Only show comment fields if user is logged-in
Groundwork for allowing promotion and demotion of links and annotations,
overriding the ACL that is typically restricted to a user or their
groups. A few new generic actions have been added to the Visibility
controller and implemented by Links and Annotations.
Make Rest errors extend RuntimeException now for better debugability
Catch non-json bad request (though server should be more consistent here)
Respect isPromotable flag on Promotable items
Make it possible to run test-only via test script
Fix bitmask done when too sleepy
More work on displaying annotations for fields and descriptions
Merge branch 'item_promotion' into securesocial-portal-tests

Conflicts:
	conf/application.conf
	modules/portal/app/controllers/portal/Portal.scala
Upgrade mailer plugin (and adjust API usage.)
Ignore securesocial.conf
Merge branch 'item_promotion' into securesocial-portal-tests
Hacking in SecureSocial as a replacement for play2-auth and custom authentication.

Allows lots of code removal (good) but still some open questions (bad)
about how we're going to keep the Neo4j backend in sync with the user
service DB (maybe use the same DB???) Other problematic areas include
how to provide the Guava injectables such as the event handler to the
play-plugin based auth API, which might lead down the road of making
all the injectables plugins again.

Still a long way from being usable.