polishes and final additions to user management

[JulianFP]

This is whats new:

• all negative responses made by us now contain an errorTypes attribute. The errorTypes are defined as follows:
  • serverConfig
    • error due to configuration of server
    • e.g.: disableSignup is set in config
  • email
    • error due to email being invalid in some way
    • e.g. when setting email in signup, changeEmail
    • not for login or similar, only when it is NOT an authentication paramter! (see auth for that)!
  • password
    • error due to password being invalid in some way
    • e.g. when signup, changePassword (like password too short)
    • not for login or any kind of authentication, only when it is NOT an authentication parameter (see auth for that)!
  • permission
    • user doesn't have permission to access this route/resource/feature
    • e.g. admin exclusive routes, user tries to modify other users or user not activated even though that is required for route
    • often combined with http status code 403
    • not for authentication failures, see auth for that!
  • auth
    • authentication failed for some reason
    • e.g. invalid credentials, invalid password, invalid token, etc.
  • notInDatabase
    • requested ressource is not in database
    • e.g. when user with specified email couldn't be found in database
  • operation
    • invalid operation at this time (e.g. some condition for this operation that is not part of request itself is not met)
    • e.g. activate_user when user is already activated
• add three custom function decorators for api routes:
  • activatedRequired: Checks wheither the user is activated before they can use the route. Mainly for upcoming job management routes
  • confirmIdentity: Checks the password from a provided 'password' form attribute (additionally to JWT Token). For routes that have serious consequences like deleteUser, changeUserEmail, changeUserPassword
  • emailModifyForAdmins: If there is a form attribute called 'emailModify': Checks if user is admin and if the specified user exists. If yes, returns user specified with 'emailModify'. If this attribute doesn't exist it will just return the currently logged in user. Useful for routes like changeUserEmail, changeUserPassword that can be used both by admins and non-admins
• Add CORS support: All routes will have the 'Access-Control-Allow-Origin' set to '*' and thus allowing all origins to access it
• add new route resendActivationEmail: resending this mail over changeUserEmail route is awkward, this should have a dedicated route
• add new route invalidateAllTokens: invalidates all existing tokens of the current user thus logging all its sessions out
• sanitize usage of get/post among all routes
  • get: for safe and idempotent routes
  • post: for routes that are neither safe nor idempotent
  • (put: for routes that are not safe but idempotent, not used currently)
• move all user management routes to /api/user subroute to avoid repeated usage of 'user' in route name and to make it coherent with /api/jobs and /api/runners
• tests
  • move all tests of user management into its own file called test_user-management so that tests for the jobs and runner apis can be separated more easily in the future
  • add new tests for new routes,
  • add new test cases for existing routes (that check for bugs I found)
  • adjust tests for new features/behavior
• fixing various other bugs

This required the following new dependency:

• flask-cors: for CORS support

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 97.79180% with 7 lines in your changes are missing coverage. Please review.

Project coverage is 96.81%. Comparing base (d08a2e2) to head (8cd9ac1). Report is 3 commits behind head on main.

Files	Patch %	Lines
project_W/model.py	89.23%	7 Missing :warning:

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #5 +/- ## ========================================== - Coverage 96.94% 96.81% -0.13% ========================================== Files 10 10 Lines 818 942 +124 ========================================== + Hits 793 912 +119 - Misses 25 30 +5 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[JulianFP]

This PR should be ready now, sorry. The 7 additional untested lines codecov complains about are the new wrapper that tests if a user is activated. That is not tested yet because it is not in use yet, it is for the /api/jobs routes that are not in this branch