Introduce disclosure document for all third party integrations
Setup hijacks owner user

closes #3074
- user generated by fixture is hijacked
- user is updated with name, email, password, slug and status
- creates new user if db is migrated but no user exists
- previously removed tests are back
Merge pull request #3236 from sebgie/issue#3074

Setup hijacks owner user
Fix handling of async db calls in fixtures

Closes #3167
- Change fixture loading methods to keep track of promises
  returned from async database calls so that aggregators function
  correctly.
Merge pull request #3240 from jaswilli/issue-3167

Fix handling of async db calls in fixtures
Merge pull request #3064 from JohnONolan/privacy

Introduce new PRIVACY.md document
Move setup to API

closes #3136
- moved setup to authentication API
- added `POST /ghost/api/v0.1/authentication/setup` to execute the
setup process
- added `GET /ghost/api/v0.1/authentication/setup` to check if blog is
already set up (needed for #3145)
- removed unused methods from api/users.js
Merge pull request #3243 from sebgie/issue#3136

Move setup to API
Turn on update notifications for Ember admin

Issue #3160
- Use notifications API to display available update notification.
- Remove update_notification handlebars helper as now both the
  check for an available update and the notification handling
  is run from the server's admin controller index method.
- Bind the notification's location property to a css class
  for styling.
- Refactor Ember notifications to better handle notification
  objects.  Move responsibility for css class generation onto
  the notification component.
- Refactor gh-notifications component to take a location argument
  that's used to assign a css class and filter notifications.