TNL-5510

Fix the duplicate oauth_body_hash in the outcomes request

The "oauth_body_hash" appeared twice in the auth header in the request
when posting grade back to tool consumer. However, the signature sent
from edX is calculated based on only one oauth_body_hash.
On the tool consumer side, the signature is calculated based on the auth
header and will use the duplicated fields. So the signatures will not match.
And request will fail the signature validation.

The bug was introduced in this commit:
https://github.com/edx/edx-platform/commit/03cee389e0869263f5f9977098770495b5216733
on July 12th by updating the oauthlib.

Because 0.7.2(original version) doesn't have oauth_body_hash support, so a custom
OAuth1 client was implemented to add oauth_body_hash to the headers:
https://github.com/edx/edx-platform/blob/f5d0f3ff55d264ed4b68a24808b255aef5d8dad2/lms/djangoapps/lti_provider/outcomes.py#L24.
However, the new oauthlib 1.0.3 has support for oauth_body_hash
(https://github.com/idan/oauthlib/commit/51675237c410b413a11091926436420493c52866#diff-c2a1e5f1ddfe8e48ff62b59eb952644eR180).
So after updating library, oauth_body_hash is added twice.

This fixes the bug by removing the custom client and use the oauthlib
default client to generate the auth header.

patch/2016-09-12

Catalog-based MicroMasters need to be displayed in the LMS. However, the LMS currently retrieves all program data from the soon-to-be-retired programs service. Consuming program data exclusively from the catalog service is out of the question right now; it's too complex to confidently pull off in a week. This is a functional middle ground introduced by ECOM-5460. Cleaning up this debt is tracked by ECOM-4418.

Release Candidate rc/2016-09-06

update question tag extraction logic

Fixed div to inline

Making CAPA problems accessible TNL-4971

safe template escaping of the mailto link in the survey template

TNL-4973

TNL-4972

TNL-5014

FEDX-176

Dependency version update: Drag and Drop  v2.0.9

MAYN-207: Migrate WL sites to comprehensive theming for LMS

Make BlockStructure tasks more resilient against failures

Script to remove course_ids with \n from CSM

Release

https://openedx.atlassian.net/browse/TNL-5041

WIP WL-589 Upgrade to edx-django-sites-extensions 2.1.0

Some StudentModule entries were written with newlines at the end of the
course_id. This script finds those entries within a given time range,
archive them, and merges records if necessary (capa problems).

Update translations (autogenerated message)

Handle scoreable blocks without defined weight

Add a help link to the LMS header - and configuration to select Open edX or edX partner doc

Default weight to 1.0.

TNL-5410

Adds a context-sensitive link to learner documentation from the LMS. The base URL defaults to Open edX learner doc and can be overridden with the base URL for edx.org learner doc.  Also relabels the tab for support from help to support.

Updated User Info Cookie