Fixes for U2F handling on MacOS client

Fixes issue #141 and should fix issue #2 .

keymaster: add certificate refresh for aws-role-cert mode

• keymaster binary will periodically refresh certificates in aws-role-cert mode
• Documentation improvements
• keymaster-eventmond: make tables easier to read

Webauth for CLI, AWS Role certificates and more

• Support U2F with modern Firefox versions
• Add support for CLI logins using a Web browser
• Add support for generating AWS Role certificates
• Fix OAuth2 login redirection (when using another IDP for primary authentication)
• Improve Okta 2FA support
• Add support for generating ed25519 SSH certificates

Pre-release keymaster CLI with Webauth support

This is a preview release of the keymaster CLI tool which supports authentication using a Web browser.

Minor Enhancements initialization and storage

• Worked around bug in Postgres driver
• Made SQLlite based profiles NFS friendly
• Enhanced Error message on cli client for bad password
• Adding missing file for okta in rpm/debian package
• Fixed compilation issues on 1.15
• Added TOTP support for cli (thanks @erikespinoza)

v1.8.1 Bootstrap otp and other usability/security enhancements

This is a catch-up release with many features geared towards AWS based deployments.

Features:

• Bootstrap OTP flow including both self-generated AND admin generated
• x509 authentication for some admin operations
• Optional use of AWS secrets Manager to sync and distribute TLS certificate and private Keys
• Optional use of AWS secrets Manager to store CA passphrase and database Credentials
• Optional use of LetsEncrypt for ceritificate release and renewal
• Route53 DNS registration/de-registration for auto-scaling deployments
• Optional STONITH like capability for termination of unhealthy instances

Bugfixes/Security Fixes

• Updated jquery to 3.5.1
• Updated order of ciphersuites for HTTP2
• Updated go builders to 1.4.7 (linux, darwin), 1.4.6 (windows)

Client side enhancements and initial Okta support

Features:

• Added Okta public interface for password checks (keymasterd)
• Client now connects to keymaster servers before asking for credentials
• Updated travis to use go 1.13.x
• New release build on go 1.13.3

Bug Fixes:

• Minor UI typos/consistency.
• Removed GoConver due to issues with newer golang compiler