Fix icon fonts in production builds

Avoid String.prototype.startsWith() for compatibility Safari and IE

Links to source document URIs were broken under Safari <= 8 and
other browsers as well due to reliance on the
String.prototype.startsWith() API

This issue went unnoticed in Karma/PhantomJS tests because
Karma was primed with the complete set of polyfills from
the js-polyfills library, including many (all?) ES6 polyfills.

This same set of polyfills was_not_ used in the browser build however.

This commit fixes the original issue by using 'indexOf()' instead of
'startsWith()' and reduces the likelihood of such problems going
unnoticed during testing by using a much more minimal set of polyfills
under PhantomJS.

The alternative approach would be to go in the opposite direction
and polyfill any ES6 APIs in the browser. However, we need to be
careful about code bloat, so the approach taken here is the more
conservative option.

Fixes #2568

Show filenames of local documents with titles

As described in GH #2571, URL rebasing is broken
in the CSS asset pipeline, so relative URLs in
CSS files under styles/vendor are incorrect.

Previously icomoon.css worked because one of the
font variants (TTF) was inlined as a data URL.
This broken in the previous update which had only
the relative .woff URL.

This commit patches the issue by using an absolute URL
in the icomoon.css file. It will be fixed properly in
the CSS build as part of moving that out of the Python
web app.

See #2571

When the annotated document is a local (file://) document and it has a
title, then show the filename in place of the domain on the annotation
card. For example:

  seanh on "Document Title" (filename.pdf)

In cases where the document has no title then the filename would already
have been used in place of "Document Title" so don't repeat it in
(...)'s.

For remote documents the domain name is shown in (...)'s instead and the
document title is hyperlinked so the people can see the full URL by
hovering over the link.

Consolidate thread show/hide logic into ThreadController

This template conditional is notorious for accumulating extra terms, so
this commit rolls it into ThreadController where it can be more easily
tested.

T89 combined scope save btn

When changing permissions via the dropdown menu,
the changed permissions were applied to the _domain model_
representing the saved annotation instead of the _view model_
representing the current annotation being edited.

The change to the domain model triggered a reset of the view
model via AnnotationController.render(), losing any unsaved edits.

This commit makes AnnotationController.setPrivacy() apply permissions
changes to the view model in the same way as other edits in the
annotation view. These then only take effect when the 'Post to'
button is clicked.

Fixes #2567

Instead of patching the upstream UI Bootstrap build, add a wrapper around
it which stubs the $templateRequest service and wraps the Angular 1.2x implementation
of $animate.(add|remove)Class with one which returns a Promise as
UI Bootstrap expects.

When the app is upgraded to Angular 1.3x+, the 'ui-bootstrap-custom' module can just
be removed.

Card 89

When transforming old-style comments, handle null targets

Make activation created_by/valid_until fields nullable

Fix a bug where canceling changes did not reset the text

AnnotationController.revert() reverted changes to the
annotation in the editor by copying across properties
from the saved annotation to the draft.

Any properties which were _added_ in the draft but not
set in the saved version, such as the text when the text
is empty, were not reverted.

Fixes #2561

Add the updated group icon and update the icomoon font.
Also simplify the instructions for updating the icomoon font.

Card 89

In Chrome, clicks on elements inside a disabled <button>
will not invoke the <button>'s "click" event listeners
but they will propagate through the button and invoke parent
element's click handlers. In Firefox however, the click
event is not propagated.

The fix here is to install the click handler for the main
part of a dropdown button on the <button> itself, rather than
the container <div> which holds the main button and
the dropdown arrow.

Card 89

The spacing was lost when the cancel button was moved
into the <publish-annotation-btn> directive.

Card 89

Fix email notifications

Add guidelines for writing model code and db migrations

Update instructions for running front-end tests.

Make auth.effective_principals do what it says

 * Use cancel button with a thin circle outline

 * Change normal and hover colors to light/dark grey as
   per discussion on the card.

Card 89

Automatically convert URLs in annotation text to links

Add a cancel button with a thin circle outline which
matches the design.

Card 89

Card 89

This text has been obsoleted by the new 'Post to XXX' design
which makes it clearer who new annotations will be visible to.

Card 89

Card 89

Only URLs with a scheme or beginning with 'www.' are processed.

Fixes #2505

Instead of passing a full object of attributes to
util.createDirective() at the start of each test, render
a default instance in beforeEach() and then just relink
the element with the changes for a specific test.

Card 89

Card 89

Card 89

Card 89

When false, both the dropdown menu and the post button are disabled.

Card 89

The <privacy> drop-down has been replaced by the
new combined Post / privacy button.

Card 89

Card 89

Re-implement the behavior where new annotations
use the last-used privacy setting by default.

This was previously implemented in privacy.js
and the logic now lives in the replacement component,
publish-annotation-btn.js. However, the defaults
really shouldn't be set in the view but earlier when
the new annotation is created.

Card 89

The newer version of Angular UI bootstrap has
an optional keyboard-nav directive to
make dropdowns keyboard accessible.

Card 89

Using a <button> gives us keyboard accessibility and focus.

The downside is that additional styling is needed to suppress
default styling from the UA.

Card 89

This is a more descriptive name explaining what the component
is for.

Card 89