Revert "Switch container factory to webpack"

Add require_https to all is_safe_url calls

Change usages of is_safe_url to use new allowed_hosts instead of host

Exempt csrf on donate

Revert "OAuth2 API to call XBlock handlers"

PLAT-1746: Use Django 1.11 format_lazy instead of allow_lazy

Switch container factory to webpack

"host" parameter is deprecated and throws a warning

Remove SessionAuthenticationMiddleware from INSTALLED_APPS

Reapplies edx/edx-platform#17509

This reverts commit 0f7e2373.

Upgrade edx-ora2 to 2.1.17

Remove unused pytest markers for Django 1.11 upgrade

Remove temp django upgrade logic

It is always on now, and this is just a deprecated stub which will be
removed in Django 2.0.

PLAT-1524: Add on_delete kwarg to ForeignKey & OneToOneFields

Update copy for password compliance message to be more clear.

Fix PDF cert gereration/regeneration and URLs.

Django 2.0 will make this field required for `ForeignKey` and `OneToOneFields`.
In previous versions the option defaulted to `models.CASCADE` when not
specified. This change should make the deprecation warnings in the current
Django version go away.

The migrations where also modified, but the changes should not cause a change in
the database schema since `models.CASCADE` was already the old default.

OAuth2 API to call XBlock handlers

s/django.core.urlresolvers/django.urls/g

Django 1.10 deprecation fix for Hackathon XIX
Addresses PLAT-1397

TE-2543 Add tox env for Python 3.5