Add email and profile scopes in JWT Cookies

Adds an API to bulk delete completed retirements

Add test for bulk email optout mgmt cmd.

Dont assume user id in test_shib

Adding normalization to password reset

Remove deprecated JwtBuilder class

Allow redirects to subdomains after login.

ARCH-248

updated-translations

ARCH-255: update legacy imports

Note: this version update is backward incompatible.

ARCH-255

Mgmt cmd to bulk opt-out user/org combos from email.

Upgrade Django to 1.11.16 - bug fix.

Add a facility for getting the SiteConfiguration that an org belongs to

Fix flaky TestUserPreferenceMiddleware tests for xdist

Shared mixin for testing OAuth Scopes and various Auth

Mark the refresh access token view as exempt from CSRF protection.

Add unicode normalization to passwords.

ARCH-256: Move and rename redirect helper.

ARCH-168

Fixed override due date by limiting scope to selected users

LEARNER-4283

- Rename is_safe_redirect to is_safe_login_or_logout_redirect.
- Moved is_safe_login_or_logout_redirect to user_authn.

ARCH-256

Access control messaging