"state" means something specific to OAuth2 and SAML so we don't
want to confuse developers who are working on this.

Also don't use "session" which could easily be confused with HTTP
cookies.

Let the server handle the state token instead of the connector. As a
result it can throw out bad requests earlier. It can also use that
token to determine which connector was used to generate the request
allowing all connectors to share the same callback URL.

Callbacks now all look like:

    https://dex.example.com/callback

Instead of:

    https://dex.example.com/callback/(connector id)

Even when multiple connectors are being used.

contrib/openldap: add an OpenLDAP Docker image for testing

*: port oob template

Documentation/proposals: add a proposal for keeping data in-sync during refreshes

server: fix key rotation polling

gorename command run:

    gorename \
      -from '"github.com/coreos/dex/server".rotationStrategy.period' \
      -to rotationFrequency

*: build aci at the correct path including version, OS, and arch

dev branch: fix sql keys query

*: add more comments to the example config

dev branch: self managed third party resources

server: only print gc stats if something has been removed

dev branch: fix linting

dev branch: properly compile version into docker images

dev branch: add DCO and LICENSE

dev branch: add garbage collect method to storage

server: allow extra spaces in scopes

go-oidc sends an extra space before the list of scopes. This is bad
but we have to support it, so we'll be more lenient and ignore
duplicated whitespace.