make DomainAdminAuthentication properly honor digest auth

small refactor of permissions scheme to support this.
Don't accidentally truncate datetimes
require git checkout of autostaging for rebuildstaging --deploy
Merge pull request #3775 from dimagi/require-git-checkout

require git checkout of autostaging for rebuildstaging --deploy
Fix tests
chagning custom facility lookup from fixtures to cases-workflow
change disabled text for translation strategy app setting
Fix product code import/export
Merge pull request #3778 from dimagi/product-export

Fix product code import/export
Merge pull request #3776 from dimagi/hsph-reassign

chagning custom facility lookup from fixtures to cases-workflow
Merge pull request #3777 from dimagi/translation-strategy-disabled-text

change disabled text for translation strategy app setting
Merge pull request #3773 from dimagi/commtrack-dates-case-list

Don't accidentally truncate datetimes
properly render json unicode in api responses

http://manage.dimagi.com/default.asp?121803
Merge pull request #3781 from dimagi/api-unicode

properly render json unicode in api responses
Merge pull request #3770 from dimagi/domain-admin-digest-apis

make DomainAdminAuthentication properly honor digest auth
Merge pull request #3765 from dimagi/dynamic-links

convert links to static assets to dynamic
filter suggested properties in case config

to only include properties not already selected
update staging.yaml
use nicer with-syntax for multimedia zip
extract zip and media file iteration from DownloadMultimediaZip