Client: support HTTP GET of files over GUI RPC connections

There's no reason for this.

[Android] Change notification priority from PRIORITY_MIN to PRIORITY_LOW

This fixes #2750
Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

- disable it unless <allow_gui_rpc_get/> is in cc_config.xml
- return 400 and 403 HTTP replies in various error cases
- allow .html, .js, and .css filename extensions
- allow directories in path (but not ..).
    Files could be e.g. in project directories.

[Android] Remove notification on user click

When users clicks on notification in notification area it should be removed.

Fixes #2090
Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

FreeBSD: Add missing #include <sys/wait.h> for WEXITSTATUS macro.

FreeBSD: Check if the client supports AVX.

If the client receives a GET HTTP connection,
it looks for a file of that name (default index.html) in the BOINC data directory
(only .html files, no directory traversal) and returns it.
The goal is to get rid of cross-site constraints in Web-based GUIs.

Cleanup generate_account_ownership_keys

Client: support GUI RPCs via HTTP POST requests,

- make HTTP header delim into a constant
- don't send \003 reply delimiter for HTTP requests

      Also remove generation of account ownership keys from initial project
      creation script

job submission: add ability to view mem/disk usage stats for a batch.

client: sanity-check job runtime limits

client, mgr: add support for registering user's consent to project's terms of use

[Android] Add .nomedia file to client folder to tell Android Media Server not to check this folder for media files.

[Client] Ignore 'skip_cpu_benckmark' flag if requested via RPC

scheduler: if plan class name contains "amd", assume it's AMD GPU

If CPU benchmark is requested via RPC by user, it should always run even if 'skip_cpu_bechmark' is set.

This fixes #2358
Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

[Manager] Enable 'Other Options' menu for SimpleView when no client i…

This fixes #3187
Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

The docs said this was the case, but it wasn't.

Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

Add .nomedia file to client folder to tell Android Media Server not to check this folder for media files.

Assets folder has no possibility to include files with dot at the beginning so `InstallFile` function was modified to enable rename possibility when copying files from assets folder to target device.

This fixes #1437
Signed-off-by: Vitalii Koshura <lestat.de.lionkur@gmail.com>

Deploy: enable bintray cleanup script

Quality: fix small issues

Previously forgot to remove this check since the script was not intended to be run on CI.

- change seqno only on authenticated request,
  so that bad guys make a bunch of bad calls and lock out actual calls
- Fix %ld format for long
  (seqnos are long in case GUI makes > 2B calls)
- Print message if validation fails
- end of HTTP header is marked by \r\n\r\n, not \n\n

Also put some error checking into the client-side Javascript.
E.g. things should still work if password file is absent;
you just can't make RPCs that require authentication.
Much work still to be done here.

It's useful to see the stats (mean, max) of memory and disk usage,
e.g. so that you can set the appropriate bounds for future jobs.
In the case of universal VM apps (e.g. nanoHUB@home)
the natural place to put this is at the batch level;
jobs in a a batch use the same tool.

Also: add a general function for printing sizes in MB and GB,
and move a function from util.inc to the appropriate file.

- The authentication hash in HTTP header now includes the request message.
  This prevents bad guys from intercepting request message and substituting
  a different request.
- Authentication info sent to client (i.e. the GUI) now includes a random string,
  used as an additional salt in the authentication hash.
  This prevents bad guys from recording and reusing authentication headers.

Fix invalid error message on accept terms of use page

to facilitate Javascript-based GUIs.

Authentication (for operations that require it) is done using
special HTTP header fields.
At some point I'll check in a JS module for this.

vboxwrapper: if control op fails, exit for 5 min instead of 1 day