functions. Cleaned up user class to prevent marshalling of passwords,
but handle incoming password values properly. Separated create and
update methods. Made error reporting more robust.

XNAT-4325: Added an Admin UI panel for setting site-wide alerts. Also optimized appearance and positioning of site-wide alerts and the warning bar.

Jiggered the app info bean to carry path info instead of injecting
directly into filter bean. Used this to create open URL matchers to
test if users are permitted to access particular site config values.
Added test for missing properties to return 404 when values are
requested for non-existent properties.

invalidate user sessions. Fixed investigator initialization error. Fixed
password handling for new user operations.

XNAT-4301 XNAT-4394 XNAT-4500 Added @XnatMixIn class mapping processing to RootConfig. Cleaned up User class to ignore properties we don't want to see. Adjusted ResultSet processing to fix investigator API error.

XNAT-4394 Updated investigators API to include projects on which investigator is PI or associate investigator.

XNAT-4400: remove egregious padding around form panels in xmodal dialogs; allow disabling of labels for 'panel.element' widgets (label: false, or label: "")

XNAT-4286: Menu was not updating after creating new investigator (fixed); changed namespace to match file name and XAPI URI ('investigators' instead of 'investigatorData').

XNAT-4400: Changed checkboxes in Site Admin to new "switchbox" widget (panel.input.switchbox); stripped colon prefix from spawner elements' [data-name] attribute; other minor fixes and improvements to ui elements.

XNAT-4286: Total re-do of set/create investigator UI. New investigator window is now an xmodal dialog.

XNAT-4479 prevented update user page from having inaccurate error message by adding siteConfig to the context.

XNAT-4493: File uploader should be configurable to have either HTML or text results returned and display appropriately

XNAT-4486, XNAT-4487: data used to fill in values on Site Admin page is cached to prevent multiple requests; info icon moved to left of element's label.

in NotificationsPreferences. Removed /batch and /batchMail methods.
Simplify handling of SMTP properties. Refactored SiteConfigApi, removed
/batch here as well. Inserted url property to stand in for load, action,
and refresh properties in site-admin and site-setup files. Added calls
from Mark to actually set action, load, and refresh to value from url.

lib folder in case this gets pulled in again.

addition to existing no-value check.

XNAT-4472, XNAT-4478: These should both be fixed as a result of changing the Site Administration url to /app/template/Page.vm?view=admin

XNAT-4356 XNAT-4477 Added expiration time to alias token. Fixed logic in user enabling and verifying routines.

file format that became unsupported as of Java 8. Replaced with last
open release of primary Saxon 9.1.0.8 library (newer Saxon-HE library
changed API so that PipelineManager didn't compile, and other XPath
implementations would also require migrating that same code).

XNAT-4476 Fixed bug with PARs where users were either not getting access or had to go to an additional page to finish getting access.

XNAT-3822 XNAT-4132 Added automation preferences, REST API, and site admin definition for enabling and disabling internal scripting. Added fix for occasional ConcurrentModificationException when list of handlers is hit by two threads simultaneously.