feat(builder): inject GIT_SHA into builder apps
fix(builder): use proper dockerfile syntax
Merge pull request #2089 from bacongobbler/git_sha

feat(builder): inject GIT_SHA into builder apps
ref(controller): disable CSRF token authn/authz
ref(controller): switch to token-based authn

When pulling out CSRF tokens from the authentication requirements, we
are still relying on cookies. This is great from a CSRF attacker's
standpoint as attackers can easily `<iframe>` the site that utilizes the
API, generate a POST request and re-use the existing cookie. Using
token-based authn fixes this because there will be no existing authn
cookie in the request. With this change, we are also not vulnerable to
XSRF attacks either because we do not store a validated login cookie
in the browser (yay!).
fix(controller): remove PR cruft
style(client): expand string
fix(client): remove call to /api/auth/logout
test(controller): make tests use authtoken
test(controller): remove calls to client.login

Django's default test client relies on session handling and cookies for
authorization, whereas we rely on token authorization. Essentially, this
tests nothing as it's an unused workflow.
test(integration): remove cookie test

With token-based authentication, we're no longer storing sessions in a
cookie.
style(controller): flake8
fix(controller): fix tests after rebase