Signed-off-by: Kent Shikama <kent@kentshikama.com>

requestToken update

Use a query that postgresql optimises better for get_events_around

Add pepper to password hashing

Use true/false for boolean parameter inclusive to avoid potential for sqli, and possibly make the code clearer

Signed-off-by: Kent Shikama <kent@kentshikama.com>

Optionally include password hash in createUser endpoint

Signed-off-by: Kent Shikama <kent@kentshikama.com>

Signed-off-by: Kent Shikama <kent@kentshikama.com>

Don't send requestToken request to untrusted ID servers

Also correct the THREEPID_IN_USE error to add the M_ prefix. This is a backwards incomaptible change, but the only thing using this is the angular client which is now unmaintained, so it's probably better to just do this now.

Feature: Add deactivate account admin API

Allows server admins to "deactivate" accounts, which:

- Revokes all access tokens
- Removes all threepids
- Removes password

The API is a POST to `/admin/deactivate/<user_id>`

Feature: Implement purge_media_cache admin API

Rick cogley coturn readme 2

Not logical to use svn checkout against a github repo, so changed to git clone. 

Signed-off-by: Rick Cogley <rick.cogley@esolia.co.jp>

svn checkout is not logical for a checkout from github, so changed the checkout to "git clone". 
thanks @dbkr

Signed-off-by: Rick Cogley <rick.cogley@esolia.co.jp>

Use similar naming we use in email notifs for push

Reading the RST spec, I was trying to get breaks to appear by entering the double spaces after the lines in the code blocks. It does not work anyway, and, as pointed out, I've removed.

Additionally it does not appear there is turnserver.conf.default, but rather, just /etc/turnserver.conf.

Fix the sytests to use a port-range rather than a port base

as get_room_name_and_alias is now gone