Support bcrypt passwords in htpasswd

Strip JWT base64 padding before parsing. #560

typo(README): Terminiation » Termination

Fix typo in css for the sign in page template

more robust ClearSessionCookie()

README: fix nginx auth_request example for requests with body

default domain changed from request Host to blank, recently
try to clear cookies for both

Nginx never sends the body with the auth_request sub-request, but
keeps the original Content-Length header by default. Without some
config tweaks, this results in the request to /oauth2/auth hanging.

Iterate through pages returned by List Your Organizations endpoint

For some GHE instances where a user can have more than 100
organizations, traversing the other pages is important otherwise
oauth2_proxy will consider the user unauthorized. This change traverses
the list returned by the API to avoid that.

Update github provider tests to include this case.

Make Request Logging Format Configurable

distribution: create sha256sum.txt file when creating version releases

* update README.md to include instructions on how to verify prebuilt binaries for new releases.