closes #7158

closes #7170

Fixes #7165

closes #7167

It shouldn't be allowed!

This reverts commit 46097ba8.

closes #7160

Remove devise-token_authenticatable gem and only generate a token to be
used by the chat.

closes #7145

closes #7132

closes #7131

OpenID Connect spec says:

"The issuer returned by discovery MUST exactly match the value of iss in the ID Token."

https://openid.net/specs/openid-connect-core-1_0.html#IssuerIdentifier

closes #7081

fixes #4319

closes #7118

closes #7155

closes #7134

ClientsController and TokenEndpointController are called from the outside,
so CSRF verification prevents them from normal operation.

closes #7062

closes #7127

closes #7124

closes #7122

Also fix a case where offline_since can be nil.

fixes #6220

closes #7120

closes #7089

closes #7066

closes #7096

closes #7071

Also fixed the "fix public photos"-migration, because it didn't work
with migration-models :/

fixes #6177

closes #7109

closes #7105

closes #7094

fixes #7093

closes #7085

fixes #7074

closes #7075

closes #7061

also remove some unnecessary Timecop.return

closes #7060

Also remove confirm_email_token when unconfirmed_email is removed.

Fixes #7048

closes #7051

closes #7043