Implement OAuth2 password flow

[CSS] Remove refs to images that don't exist anymore.

Upgrade to alpine:3.4 and fix issues

Enable CORS by default in the nginx file

Enable CORS in the nginx file used by Docker.

Fix jsonEditor parameters when an operation is on multiple tags

On complete, ignore fragments that don't contain useful information

Auth providers like Facebook and Google tend to add garbage fragments
onto OAuth 2.0 redirect URIs to stop malicious fragments being
maintained through the flow. This change ensures that those fragments
aren't mistakenly used to attempt to complete login.

If the fragment contains a code, token or error, it is assumed to be the
correct place to find data provided by the auth provider.

removed blob special logic for strings

only pass selected scopes

Avoid using Facebook garbage fragment to complete login

fix authorization code grant to work

fixed scopes issue

Use gulp-sourcemaps to generate a sourcemap

Chrome gets very confused by the sourceMappingURL from swagger-client.js. Use
gulp-sourcemaps to generate our own sourcemap which it is happier with (and
means that the other bits of swagger-ui.js are also correctly sourcemapped).

Remove globals, regression in v2.2.6