api: don't create a user if you can't send them an email

email/smtp: Fix type comparison error

Fixes #134

server: user management endpoints strictly conform to schema

This change disables the URL fixing behavior or the router associated
with the user management schema. After this commit, URLS routing
to /api/$VERSION/users must target exactly the specified paths. In
addition, `/api/$VERSION/users/` will serve a 404

This change allows users to hit the user create endpoint, which
would previously serve a redirect rather than actually making the
associated change.

Add smtp support

cmd/dex-worker: wait 'til connectors are available

Otherwise, if worker starts without connectors, and then connectors are
added workers have to be restarted to pick up the changes.

Get the K8s files up to date with more docs

Documentation: no need to create a new Google project

A new API key can be generated in an existing Google project

Fixes #123

Signed-off-by: Chris Swan <@cpswan>

Also, move most flags to environment variables.

Remove unnecessary else statements

Whenever it makes the code easier to follow, use early return to
avoid else statements.

README.md: "Similar Software", "who should use"

Documentation: remove outdated TLS info

Update README.md

cmd,server,static/html: Configurable name, logo

fixes #47

refresh: bcrypt raw bytes rather than base64 encoded string.

This enables us to control the length of the bytes that will be bcrypted,
by default it's 64.

Also changed the token's stored form from string('text') to []byte('bytea')
and added some test cases for different types of invalid tokens.

cmd/dex-overlord: was using the wrong err

return refresh token only when scope contains 'offline_access'

Require 'openid' in scope for all requests.
Require 'offline_access' for returning refresh token.

cmd/dex-overlord: bind admin API on 127.0.0.1

Instead of 0.0.0.0; this is safer, since the admin API is very powerful.

fixes #97