add ability to enroll users into courses

Cdodge/sprint h api work

Course-Group Relationships

move api from common to lms

Xblock external UI - Server-side integration

Included commits:
* xblock-external-ui: Include CSRF token in the API answer
* xblock-external-ui: Adds support for CORS headers (cross-domain request)
* xblock-external-ui: Include full path when building local_url

This updates the XBlock dependency to edX/XBlock@cba8d788f0c16802b4cc468ccb6dc765b62e55e8
and add the newly introduced enforce_type methods

make GA account code configurable as well as allow GA to appear on courseware. Also, make the GA account ID configurable rather than hard coded in the Mako template

Conflicts:
	lms/envs/aws.py
	lms/envs/common.py

Add some optional policies around password resets, such as password reuse, forced password resets, allowed frequency of password resets

- Added hinting/feedback mechanism for multiple choice problem type
- fix styles to make feedback act as an overlay as opposed to a side-by-side block

update hotspot reveal styling

address some PR feedback. Start to build out some Jasmine tests

address PR comments

add some default content

fix when running under https

Updating the hash of the ORA2 release candidate in the requirements

Revert "Open ended panel headings not internationalized."

Fix bad interaction between pluggable InputTypes and Microsites

This reverts commit eb9133ae.

ORA-352

Pluggable InputTypes use edxmako.paths.add_lookup to inject new
mako template directories. Those were getting clobbered by microsites
(and by theming), which were completely rebuilding the mako template
lookup list from scratch.

This commit switches those two features to use the same add_lookup
function as pluggable InputTypes.

[LMS-2489]

Updating ora2 requirements