Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

Signed-off-by: NRémy Coutable <remy@rymai.me>

Signed-off-by: NRémy Coutable <remy@rymai.me>

Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

- This would allow anyone with a personal access token (even a read-only
  token, once scopes are implemented) to escalate their access by
  obtaining the private token.

The user API documentation and the actual implementation were out of sync, missing certain newly introduced fields and beeing inconsistent between certain API definitions. The documentation was changed according the actual latest implementation.
Signed-off-by: NFabio Huser <fabio@fh1.ch>

[ci skip]

Added fields are last_sign_in_at and confirmed_at.
They are available for GET /users/ and GET /users/:id for admins.

Closes #840

Needed to support Huboard

Closes https://github.com/gitlabhq/gitlabhq/issues/9391

Add the error code returned in the headers as well as an example of the
JSON informative message returned in the body.
Signed-off-by: NLoic Dachary <loic@dachary.org>

Signed-off-by: NLoic Dachary <loic@dachary.org>

The keys resource includes a create_at attribute

- multiple blank lines before header
- skip header level
- colon at end of header
- break very long lines
- align definition like lists at marker
- case typos
- informal contractions

Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>