Create views for index and secret

Put secret and index in views, rather than `render :text => ...` so that layouts are automatically pulled in.
Set rails session timeout to 2 hours
Update secrets.yml.example

When the Devise initializer was changed to reference secrets.yml, this was not updated.
Merge pull request #159 from 18F/feature/update_secrets_yml_example

Update secrets.yml.example
Merge pull request #158 from 18F/feature/session_timeout

Set rails session timeout to 2 hours
Support legacy token request via authorization endpoint

legacy implementation used POST /oauth/authorize for both the user facing
authorization screen and the API endpoint to request a token ... so, we
have to support it here.
remove commented out redirect_uri
Group deploy and stage/production gems so they don't get loaded in dev/test
Merge pull request #162 from 18F/feature/support_legacy_token_requeste_via_authorize_route

Support legacy token request via authorization endpoint
Re-architect HTML/CSS/SCSS/JS

The architecture of the way we were using SASS/SCSS and
Bootstrap did not take advantage of the fact that Bootstrap
is componentized and overwritable.  Most of our definitions
should be created as partials and then imported without
compilation so that it can use the varibles and mixins
defined within each library imported.

There were a lot of CSS classes created to implement
the design styles that were not needed at all.  Most everything
we need is already in Bootstrap, and a few CSS tweaks will get
you the layout you want.

For the new architecture:

application is what everything is compiled into, which
imports the bootstrap-theme, fontawesome, and the
myusa (myusa-specific) stylesheets

bootstrap-theme includes partials that override bootstrap:
- colors -- put all colors in here
- fonts -- all the font definitions
- elements in bootstrap-theme directly override bootstrap before it is loaded
- bootstrap-overrides overwrites css classes after bootstrap is imported
for elements that don't have variables that can be manipulated in SCSS

new.html for authorizations has been updated to show how to use
bootstrap effectively with less code and less css class definitions

the javascript has been updated to use the new class definitions

oauth_helper is updated to provide either an input box or text
depending on whether the value is already set.
Merge branch 'devel' into hotfix/css-improvements
Fix tests and fix for failing test

The tests expect that you can click on the label and it
correspondingly checks the box.  Fix the HTML to allow this
behavior.

another test expected the input to be disabled after being
entered, but that's not the semantics, so remove that line.
Next .scope-list CSS definitions

Since we're using SCSS, we can nest these.  Which we should
do.  Because it is easier to read.  And makes more sense.
Update subhead to match wireframes

The subhead uses gray underneath the h1.
add back test for missing profile field
Hide "No info for..." message

The no info message should only be shown when all the checkboxes
are unchecked.  This commit hides it by default, and only shows
it if all the checkboxes are unchecked.  Once a checkbox is
then checked, it hides the message.
Import header design and re-factor

and it didn't follow the designs from #94.

A few major changes:
- Switch to using as many bootstrap classes as possible
- Factor the header into three types:
  - application --> for authentication and all error/etc pages
  - marketing --> for the home page and regular docs
  - dashboard --> for our dashboard application
- Make fonts and spacing line up with wireframes, be more clean

The header is also split into partials to be more manageable.

Controllers can set their default layout in config/application.rb
to be different than application, which will render the other
headers accordingly.
Enable coverage test results in Shippable
Merge pull request #171 from 18F/feature/shippable-coverage-reports

Enable coverage & test results in Shippable
Merge pull request #163 from 18F/feature/clean-up-gemfile

Group deploy and stage/production gems so they don't get loaded in dev/t...