feat(registry): image without development libraries to reduce the size.
fix(controller): include message to avoid confusion building the component
fix(deisctl): control plane components should restart on failure
test(tests): add config:unset tests
ref(docs): rewrite coding standards doc as a PR checklist

The "coding standards" document needed an update for go, our
most prevalent implementation language. It was also verbose and
a bit rambling as it had grown over time, so this attempts
to condense and focus it as a simpler checklist to follow.
Merge pull request #2125 from gabrtv/restart-policy

fix(deisctl): control plane components should restart on failure
Merge pull request #2119 from mboersma/update-code-standards

ref(docs): rewrite coding standards doc as a PR checklist
Merge pull request #2102 from aledbf/reduce_controller_size

feat(controller): image without development libraries to reduce the size.
Merge pull request #2128 from bacongobbler/2085_unset_tests

test(tests): add config:unset tests
chore(publisher): Add missing deploy target

`make -C component deploy` should work for all deis components
Merge pull request #2138 from johanneswuerbach/patch-6

chore(publisher): Add missing deploy target
fix(controller): don't clone run containers on deploy
Merge pull request #2145 from mboersma/ignore-run-deploy

fix(controller): don't clone run containers on deploy
ref(controller): disable CSRF token authn/authz
ref(controller): switch to token-based authn

When pulling out CSRF tokens from the authentication requirements, we
are still relying on cookies. This is great from a CSRF attacker's
standpoint as attackers can easily `<iframe>` the site that utilizes the
API, generate a POST request and re-use the existing cookie. Using
token-based authn fixes this because there will be no existing authn
cookie in the request. With this change, we are also not vulnerable to
XSRF attacks either because we do not store a validated login cookie
in the browser (yay!).
fix(controller): remove PR cruft
style(client): expand string
fix(client): remove call to /api/auth/logout
test(controller): make tests use authtoken
test(controller): remove calls to client.login

Django's default test client relies on session handling and cookies for
authorization, whereas we rely on token authorization. Essentially, this
tests nothing as it's an unused workflow.