The bcrypt hashing algorithm runtime grows exponentially with cost,
and might cause a timeout if the cost is too high. Notifying the user
of high cost and of long running calculations will help with tuning
and debugging.

Update deps

server/rotation.go: Fix key rotation with multiple dex instances.

.travis.yml: bump golang version to 1.8.3

scripts: bump builder to Go 1.8.3

Documentation: add a group query example for the ldap connector.

bugfix: avoid generating an invalid ID attribute in SAML's AuthenRequest element

Google hosted domain support

Avoid generating an identifer which starts with a number because it may be used as a SAML's ID attribute

examples: document explicit flow in example config

Update using-dex.md

Update using-dex.md

Documentation/github-connector: warn user that GitHub email id should be public.

connector: improve error message for callback URL mismatch

Documentation/ldap-connector.md: Warn about LDAP connector's bindPW restriction.

server: fix localhost redirect validation for public clients

connector/ldap: correct a comment.

connector/ldap: check for blank passwords and return error.

cmd/dex/serve: add local connector directly to static connectors in storage

server/api: return empty list of refresh tokens if user does not have any