*: validate InResponseTo SAML response field and make issuer optional

glide.yaml: update goxmldsig

storage: make static storages query real storages for some actions

*: fix spelling using github.com/client9/misspell

connector/oidc: expose oauth2.RegisterBrokenAuthHeaderProvider

If dex is configured with static passwords or clients, let the API
still add or modify objects in the backing storage, so long as
their IDs don't conflict with the static ones. List options now
aggregate resources from the static list and backing storage.

api: Update timestamp type for RefreshTokenRef to int64.

storage/conformance: update conformance tests with multiple entries per resource

storage/kubernetes: log INFO level if TPR already exists, not ERROR

storage/sql: add missing WHERE statement to refresh token update

update kubernetes example-app explanation

Clarify some potentially confusing issues with how to run and build the
example-app binary.

*: only use docker when releasing, update to Go 1.8, remove aci scripts

This change modifies our release process to only require Docker
when building a release and updates our released binary to use Go
1.8. It also removes our .aci scripts, which we've not been
regularly building.

A nice consequence is that OSX users can now build a release image.

*: update go-oidc and use standard library's context package

examples/grpc-client: minor corrections in the dex client example.

Added produciton-users and integrations pages

server: fix expiry detection for verification keys

storage/kubernetes: enable HTTP/2 support

examples: adding a gRPC client example.

storage/kubernetes: fix conflict error detection in TRP creation

PR #815 fixed the Kubernetes storage implementation by correctly
returning storage.ErrAlreadyExists on POST conflicts. This caused a
regression in TPR creation (#822) when some, but not all, of the
resources already existed. E.g. for users upgrading from old
versions of dex.

Fixes #822