Fixup signin and signout

No Issue
- Move authentication related handlers to the Application route.
- Switch Sign Out from a button to a link.  Use the signout route
  to handle invalidating the session and redirecting instead of
  an action from a button.
- Clear error messages on signin page when pressing log in button.
- Errors are now always shown on sign in screen and a success
  notification is shown after sign out.
- Update functional tests.
Settings screens redirect for certain roles

Closes #3291
- Adds redirects based on roles as defined in the case
- Adds new mixin `CurrentUserSettings`
- For authors, all settings pages redirect to `users/self`
- For editors, all settings pages other than specific users redirect to `users`. Any user that is not self or an author redirects to `users`
Merge pull request #3447 from jaswilli/auth

Fixup signin and signout
Merge pull request #3416 from alarobric/case_3291

Settings screens redirect for certain roles
Properly remove email notification on signout.

no ref
- Calls notifications.clear() on signout
Disable user settings autocomplete in Chrome

Closes #3271

- Adds 2 hidden inputs at the top start of the form that trick chrome into filling those, leaving out the rest.
User API ability to filter users by role

refs #3446

- This only covers the API changes needed for #3446
Disable autocomplete for setup & signup screens

No issue

- Adds 2 hidden inputs at the top start of the form that trick chrome into filling those, leaving out the rest.
Stop validation error notification stack

closes #3383
- Calls closePassive() if a new validation error is thrown to display
only the latest validation error
Merge pull request #3455 from ErisDS/issue-3446

User API ability to filter users by role
Transfer ownership end point

closes #3426
- added transfer ownership endpoint
- added owner to roles.permissible
- manually removed owner from roles.browse
- removed hard coded author role
- fixed tests that were passing due to hard coded author role
- added testUtils.setup(‚roles‘)
Users API advanced browsing

closes #3085
- active and invited include multiple statuses when fetching
- adjusted data generator
Perform a hard refresh upon signout.

Closes #3458.
Fix unhandled exception

no ref
- return result of mail.send
Merge pull request #3449 from felixrieseberg/iss3383

Stop validation error notification stack
Merge pull request #3453 from PaulAdamDavis/3271-prevent-website-autofill

Disable user settings autocomplete in Chrome
Merge pull request #3454 from halfdan/signout-email

Properly remove email notification on signout.
Merge pull request #3456 from PaulAdamDavis/prevent-auth-autocomplete

Disable autocomplete for setup & signup screens
Merge pull request #3457 from sebgie/issue#3426

Transfer ownership end point
Merge pull request #3463 from rwjblue/hard-refresh

Perform a hard refresh upon signout.