Ping #1262

Properly check for policy equivalency during renewal.

This introduces a function that compares two string policy sets while
ignoring the presence of "default" (since it's added by core, not the
backend), and ensuring that ordering and/or duplication are not failure
conditions.

Fixes #1256

Revert "Change mysql connection to match new"

Change mysql connection to match new

Documentation update to reflect mysql config connection from the old to the newer format

Update userpass.html.md

Remove check for using CSR values with non-CA certificate.

The endpoint enforces whether the certificate is a CA or not anyways, so
this ends up not actually providing benefit and causing a bug.

Fixes #1250

Update sys-step-down.html.md

Fix a typo

Restore the previous valid token if token authentication  fails

Enfore ACLs for sys-capabilities endpoint

Fix Typo