YAML is just too easy to get wrong

closes #8132

closes #8127

closes #8063
closes #8061

Non-attribute arguments will be disallowed in Rails 6.0.

Accessibility of private/protected class methods in :scope is deprecated and will be removed in Rails 6.0.

Rack did so much refactoring, we do not see a Response object here anymore.

To avoid an conflict with Rails, and to avoid confusing by twitter's gem overloading the method.

 ActiveRecord 5.2.x occasionally calls with a nil parameter explicitly provided, so using default arguments does not work.

closes #8060

closes #8064

fixes #8043

closes #8044

Only delete photos older than a day, so we don't delete photos for posts
which were uploaded 10 minutes ago and the author is still writing the
post for it.

closes #8041

this makes sure we don't use an old otp_user_id from an old session

closes #8031

This:
* makes sure that after_database_authentication is called for users with
enabled 2fa.
* handles paranoid mode correctly

fixes #8023

fixes #7757

closes #8029

fixes #8016

closes #8028

This ensures the hostname is downcase and thus subsequent third party library
assumptions hold, namely http-cookie (pulled through faraday-cookie_jar) doesn't
raise

closes #8021

And remove unused translations and make "another pod" translatable.

closes #7896

Use a partial to share code between mobile and desktop, add the new route to the RegistrationController, drop flash message for closed registrations

fixes #7767

fixes #7910

closes #7966

It doesn't add any security to have this encrypted, but it adds
complexity for podmins, because they need to backup the key.

closes #8014

closes #8008

Using token doesn't make much sense when you can generate new tokens
right below.

closes #8006

They don't make sense on that page, because at this stage, the user
already has an account and also has already entered their password.

closes #8005

closes #8004

fixes #8001

closes #8003

closes #8000

fixes #7997

closes #7998

Closes #7972

closes #7976

closes #7959