- When a list 403s, treat it as if it were empty
- When a single resource 403s, redirect to an application error page
  that has a backdoor link to the tokens page

Allow batch jobs to be rerun if purged

Ability to introspect self token

Test fixes from #3383

sync

base64 migrate token

This PR allows batch jobs to be rerun if they have been purged.

Allow Node.SecretID for Node.GetNode and Allocs.GetAlloc

Nodes before 0.5 did not have a SecretID. Since SecretID is now a
required field and 0.4.x is >2 point releases ago, drop support for it.

HTTP header values must be ASCII.

Also constant time compare tokens and test the generate and compare
helper functions.

Remove AllocID from ExecutorContext

Fix typo: job -> task

UI for Namespaces (enterprise only)

SecretID -> AuthToken

An auth token is required if ACLs are enabled

Fix sorting of job versions

Permission denied results in 403