Fixes a bug where the persisted state groups were different to those actually
being used after auth resolution.

This is duplicated, so let's factor it out before fixing it

this is internal to statestore, so let's keep it there.

Fix for #2635: correctly update rooms avatar/display name when modified by admin

This reverts commit f9b255cd, reversing
changes made to 1bd654da.

Return whether a user is an admin within a group

Ignore <noscript> tags when generating URL preview descriptions

Logging and logcontext fixes for Limiter

Add some logging to the Limiter in a similar spirit to the Linearizer, to help
debug issues.

Also fix a logcontext leak.

Also refactor slightly to avoid throwing exceptions.

Make the get_rooms_in_group API more sane

support inhibit_login in /register

Return entries with is_public = True when they're public and is_public = False otherwise.

Allow things to pass inhibit_login when registering to ... inhibit logins.

Add more hooks to ModuleApi

Add a hook for custom rest endpoints

Factor _AccountHandler proxy out to ModuleApi

Factor out _configure_named_resource

add `get_user_by_req` and `invalidate_access_token`

Let the user specify custom modules which can be used for implementing extra
endpoints.

We're going to need to use this from places that aren't password auth, so let's
move it to a proper class.

This was a bit of a code vomit, so let's factor it out to preserve some sanity

Notify auth providers on logout

Allow password_auth_providers to return a callback

Let auth providers get to the database

this got broken in the previous commit

Provide a hook by which auth providers can be notified of logouts.

... so that they have a way to record access tokens.

Let password auth providers handle arbitrary login types

Provide a hook where password auth providers can say they know about other
login types, and get passed the relevant parameters

Move access token deletion into auth handler

automatically set default displayname on register

Break dependency of auth_handler on device_handler

Remove the last vestiges of refresh_tokens