CLC-3164 Include deleted bCourses course sites in SIS ID check
CLC-3656: Finaid messages link in status dropdown should go to finances instead of dashboard
https://jira.ets.berkeley.edu/jira/browse/CLC-3656
CLC-2949 - Update "Add People" tool to support Canvas Account Admins
CLC-2949 - Removed unnecessary option with call to Canvas::Admins#admins_list
CLC-2949 - Converted @canvas_course to method var in #authorize_adding_user. Moved canvas_course_id integer conversion to method
CLC-2949 - Added comment regarding dependency for Canvas::CoursePolicy class
CLC-2949 - Removed unnecessary exception handler in CanvasController. Inherited from ApplicationController
CLC-2949 - Removed unused functionality from Canvas::Admins
Merge pull request #2412 from christianv/CLC-3656

CLC-3656: Finaid messages link in status dropdown should go to finances
Merge pull request #2409 from redconfetti/CLC-2949-add-admin-support

CLC-2949 - Update "Add People" tool to support Canvas Account Admins
Merge pull request #2411 from raydavis/raywip

CLC-3164 Include deleted bCourses course sites in SIS ID check
CLC-3414 "Implement: Re-authenticate when accessing View As"

https://jira.ets.berkeley.edu/jira/browse/CLC-3414

created a before filter in the application controller (:check_reauthentication)

that checks that the authenticated user is an admin and in the case
that they haven't reautenticated yet, and the renew=true param is present,
reauthentication is performed by calling /auth/cas?renew=true

Had to do a monkey patch on the omniauth-cas gem for the login_url method:
It checks that if the renew=ture parameter exists, and if not, it merges the
renew=true parameter into it's login_options that end up building the CAS url.

Upon callback from CAS, the SessionController#lookup method sets the :reauthenticated
cookie if the user is acting_as and the renew parameter is present.

This functionality has been implemented with the Settings.features.reauthentication flag

Fixes made to this PR
- Removed any special redirects from the UI. The check_reauthentication skip_before_filter
- skip :check_authentication filter in :lookup, :stop_act_as, and :destroy actions of the SessionsController
- feature flag was wrongly named: reauthorization instead of reauthentication
- Made previously passing tests pass again by sticking
  Settings.features.reauthentication = false
  in the before block.

To-dos:
- Make an integration test that confirms the redirect to /auth/cas?renew=true
  when super-users are acting_as and to not have the reauthenticated cookie set
  (when the feature flag is activated)
added controller test that proves that admin users who are acting-as and have no reauthenticated cookie get redirected to /auth/cas?renew=true
Explicitly specify that Settings.features.reauthentication = true, so that the test always passes