It seems with the addition of twig templates another way to process
these links (or other links) has been started but which is broken. The
original way still remains in the code. Make it clearer which links this
concerns by making the template variable more explicit and remove the
unused tabs code.

Closes: #1770

We accept AuthState via untrusted URL parameters. As a defense in
depth measure, validate that it conforms to our expected format
before we output it again in HTML, feed it to a database, use the
URL or do any further processing with it.

Closes: #1706

* Reset submit-button on back-button

* Fix back-button for test-authsource page for non SP-sources

* Update changelog

The multi-line comments break the 'dist' version of authsources.php file.

This does it in one place and avoids this module/template-specific thing
from ending up in the PHP metadata array for the entity.

Deal with this in multiauth and document that this is the case

* format/lang/typo

* docs

* fixed width

Clean up CONTRIBUTING: remove credits (outdated, mentioned elswehere) and remove info already in SECURITY.md

* Migrate old www-script to controller

* Add unit test

* Split-off Psalm for the testsuite; we can be more lenient here (errorLevel=5)

* Fix some reported issues

* Fail on error