(cherry picked from commit 3f243e14)

(legacy, ipsec) flip ipv4/ipv6 subnet in ipsec phase2, closes https://github.com/opnsense/core/issues/446

(cherry picked from commit d0940e86)

(cherry picked from commit a7092d56)

(cherry picked from commit f1bb36ee)

(cherry picked from commit 805a739a)

(cherry picked from commit c8437ad6)

(cherry picked from commit 27f350c2)

(cherry picked from commit 0377f9e3)

(Captiveportal, new) send Content-Type on template download, chrome still ignores the Content-Disposition tag

(cherry picked from commit bb6e5520)

(cherry picked from commit 65975750)

more info : https://forum.opnsense.org/index.php?topic=1562.msg4811#msg4811

todo: remove rest of auth funcions with overlapping functionality in auth.inc

(cherry picked from commit 32ab2367)

(cherry picked from commit 21d0227e)

(cherry picked from commit 06f5db67)

(cherry picked from commit 3cfac591)

(cherry picked from commit fe45340c)

(cherry picked from commit 40d2aa86)

(cherry picked from commit e0585398)

(cherry picked from commit a8fa4e5a)

(phalcon / legacy bindings) move script phalcon load to single location, legacy scripts should use legacy_bindings.inc, new should use script/load_phalcon.php

(cherry picked from commit 319ae9c4)

(cherry picked from commit 7e7a29ad)

(cherry picked from commit c863336d)

(cherry picked from commit 8ab938ca)

(cherry picked from commit b0926593)

(cherry picked from commit be8e3e8a)

(cherry picked from commit b8bbf070)

(cherry picked from commit 6df157a1)

(cherry picked from commit e96e68f7)

(cherry picked from commit 8a492774)

(cherry picked from commit 07fe290b)