fixes #6473

closes #7199

closes #7186

fixes #5094

closes #6952

closes #7197

closes #7196

closes #7185

closes #7184

closes #7183

fixes #7072

closes #7181

closes #7187

closes #7129

* append html to spec.content() instead of body
* don't append the unused conversations modal fixture
* actually test that showModal has been called

* test that tag element are removed when clicking the tag's remove button

* append html to spec.content() instead of body
* don't append the unused conversations modal fixture
* actually test that showModal has been called

because the desktop view doesn't use the name parameter anymore

Regression introduced in #7132

fixes #7073

closes #7166

closes #7158

closes #7170

Fixes #7165

closes #7167

It shouldn't be allowed!

This reverts commit 46097ba8.

closes #7160

Remove devise-token_authenticatable gem and only generate a token to be
used by the chat.

closes #7145

closes #7132

closes #7131

OpenID Connect spec says:

"The issuer returned by discovery MUST exactly match the value of iss in the ID Token."

https://openid.net/specs/openid-connect-core-1_0.html#IssuerIdentifier

closes #7081

fixes #4319

closes #7118

closes #7155

closes #7134

ClientsController and TokenEndpointController are called from the outside,
so CSRF verification prevents them from normal operation.

closes #7062