Accounting for mixed active content restriction for conditional rendering of iframe tooltips
Fixed templates so URLs and reference links are now live bound
Better fix for content model issues, now dumping all live bound markup into a script tag before being slurped up into the link attributes
Auditor field in audit modal
Refactored auditor modal
Live binding for auditor field.
Don't show auditor field when no authorizations
Modals refactor #1: move owner setting to models, so Program can treat it specially
Modals refactor #2: moved Auditor management for Audit to Audit.prototype.save()
Modals refactor #3: removed dead code for old Section-Objective create-and-map modal
Enable adding LHN sections from extensions

* Makes tooltips optional
* Makes actions customizable
* Adds "LHN.Sections" hook
Add "Risk" in LHN with "Risk Assessments" sub-section

* Adds `RiskAssessment` model client-side
* Adds custom templates and registers with "LHN.Sections" hook to show
  Risk section in LHN with "Risk Assessments" sub-section
Merge remote-tracking branch 'origin/develop' into feature/auditor-in-edit-modal
Merge pull request #941 from reciprocity/feature/add-risk-assessment-ui

Add initial Risk Assessment UI
Merge branch 'develop' into feature/mixed-content-notification

Conflicts:
	src/ggrc/assets/javascripts/mustache_helper.js
Removing manual hookup from render helper
Add `UserRole` "read" permissions for some roles

* Basically, anyone who needs to see the Auditor of an Audit should have
  this permission
Comment out 'Edit' / '+ Auditor' to avoid JS issue

* `saveAuditor` method no longer exists on the controller
Merge pull request #906 from reciprocity/feature/auditor-in-edit-modal

Auditor field in audit modal
Merge pull request #924 from reciprocity/feature/mixed-content-notification

Reference link popovers improved.