[ReleasePrep][2017.05.19]RI of dev into master

Fixes #4002. Relevant to [VSTS #395879](https://devdiv.visualstudio.com/DefaultCollection/DevDiv/_workitems?id=395879&_a=edit). This help-text bug was for the sign-in page, but this also affects the Report Abuse page.

* Fixed accessibility of email field in report abuse page
* Fixed signature accessibility

* Added Nuget.Services.Logging; moved to TelemetryResponseCodeProcessor
* Added binding redirect for AI

…4004)

…4004) (#4030)

…3645 (#3757)

* adding new optional semVerLevel query parameter to v2 odata endpoints

* adding new optional semVerLevel query parameter to v2 autocomplete endpoints

* Applying semVerLevel filter on v2 OData endpoints

* Use [FromUri] attribute on semVerLevel
(avoids having single quotes in the parameter value)

* Ensure navigation links on v2 feeds use normalized version

* Clarifying comment on Get(Id=,Version=) v2 API

* Properly default to semver2 inclusion on Get(Id=,Version=)

* Compare NormalizedVersion to be able to retrieve matching SemVer2 package versions for a given normalized version string.

* Code review feedback

* Update and fix broken test data

…ns (#3761)

* Keep legacy version compatibility checks in place for non-semver2 versions

* Added comment to clarify the reasons behind the legacy version check.

* Fix typo

* Rename test for clarity

* code review feedback

…d feed name (#3864)

#3842)

…able)SemVer2 (#3863)

…equesting a specific version, and compare on NormalizedVersion

…eter (#3903)

…st versions (#3909)

… in the URL)

…3942)

…ckagesByIdTest #3947 (#3948)

…3966)

…g error message (#3970)

…#3897 (#3988)

…isplayed. #3916 (#4031)

Phase 2 of SemVer2 support

Merge dev into master - SemVer2

FI master->dev

* Average download shown incorrectly when its 1.x #4039

* Moved logic to viewmodel and added UTs

* SemVer2 - Missing db index on Packages table #498

* SemVer2 - Missing db index on Packages table for partial search #499 (#4074)

…rLevel when using the db #4086 (#4087)

…rLevel when using the db #4086 (#4087)

…sions #4092 (#4093)

* Make downloads link on home page a proper link (#4052)

* Fix the date format on stats page (#4057)

* Update telemetry processors (#4059)

* Average download shown incorrectly when its 1.x #4039 (#4040)

* Average download shown incorrectly when its 1.x #4039

* Moved logic to viewmodel and added UTs

* Package-Versions autocomplete endpoint does not properly handle semVerLevel when using the db #4086 (#4087)

* v2 package-versions auto-complete endpoint should exclude deleted versions #4092 (#4093)

* Remove auto-refresh AJAX call for total stats on home page #4090 (#4091)

…rsions #4092 (#4099)

- Added inline confirmation when adding new package owner
- Added package URL link to package owner request emails
- Added new notification to co-owners when package owner request is confirmed
- Added secure push policy messaging to communication above (confirmation, request, and notification)
- Added secure push policy messaging to package view for owners and admins
- Fixed bug on security policy admin view where toggle all broken if multiple subscriptions
- Updated security policy admin view to not reload page on update postback

- Added inline confirmation when adding new package owner
- Added package URL link to package owner request emails
- Added new notification to co-owners when package owner request is confirmed
- Added secure push policy messaging to communication above (confirmation, request, and notification)
- Added secure push policy messaging to package view for owners and admins
- Fixed bug on security policy admin view where toggle all broken if multiple subscriptions
- Updated security policy admin view to not reload page on update postback

…y constructs query strings (#4121)

…anual download (#4240)

Address #4122

* RequireSslAttribute to support the HEAD method correctly

* RequireSslAttribute is now used for every single request.

* Functional tests

* ForceSslMiddleware instead of global filter

* Removed the "if authenticated" comment

* Made Gallery to use the Nuget.Services.Owin library instead of other HTTPS redirect classes.

* Udpated to newer version of the ForceSslMiddleware.
Added /api/status to the list of exclusions.

* Merge error fix

* ForceSslExclusion documentation fix

* Stable NuGet.Services.Owin

* Added separate method for the Load Balancer to check the Gallery's own health (not the dependent services).
Modified tests to check that the new method does not redirect to HTTPS.

* Added `ForceSslExclustion` value example.
Duplicated documentation for the `ForceSslExclustion` in `AppConfiguration`.

* renamed the endpoint for LB health probe

* undo default SSL setting update

…set to latest (#4282)

[Deployment 28.06.2017] FI master->dev

…4292)

* Add X-NuGet-Warning header to response when pushing SemVer2 package

* added unit test

… site (#4239)

* Warn package authors when uploading a semver2 package through the web site

* CR feedback

* fix wording

* Avoid HTML duplication of submit button on VerifyPackage view + move button out of the warning banner for semver2

* Added fwlink + updated wording

* Fix trx output of functional tests not to override each other

* PR feedback

* Add new common stylesheet for highcontrast specific changes.
* shift bars slightly so Downloads text is always visible.