This is mostly for development where VS Code might not have finished
compiling yet.

This reverts commit c7127cb2.

No longer needed since VS Code has their own now.

Also for #1278.

Fixes #1278.

Apparently the manifest spec doesn't include sending credentials in an
attempt to be secure by default.

Fixes #1212.

Fixes issues with unexpected characters breaking things when setting the
cookie (like semicolons).

This change as-is does not affect the security of code-server
itself (we've just replaced the static password with a static hash) but
if we were to add a salt in the future it would let us invalidate keys
by rehashing with a new salt which could be handy.

If you visit /login/ instead of /login the cookie will be set at /login
instead of / which means the cookie can't be read at the root. It will
redirect to the login page which *can* read the cookie at /login and
redirect back resulting in an infinite loop.

The previous solution relied on setting the cookie at / (any invalid
value works) which then overrode the login page cookie since
parseCookies only kept a single value. So the login page would see the
same cookie the root was seeing and not redirect back. However, that
behavior depends on the cookies being in the right order which I'm not
sure is guaranteed.

This new method tests all available cookies and always sets the cookie
so the root path will be able to read it in case the login page is
seeing a cookie the root can't.

It also goes a step further and explicitly sets the path on the cookie
which fixes the case where there is a permanent misconfiguration
redirecting /login to /login/. Otherwise the cookie would continually be
set on /login only and you'd have another loop. It also means you only
need to delete one cookie to log out.

Lastly add some properties to make the cookies a bit more secure.

Should prevent endless redirects when the cookie is set on a different path or domain (like with a dot prefix).

Fixes #933.

Accidentally used local instead of remote.

Fixes #1127.

Fixes #1076.

It doesn't show in the explorer anymore so there's no point. Also remove
the local scheme transform which is no longer required with the latest
client-side extension implementation.

Partly addresses #1121.

This fixes code-server exiting with zero on errors.

Fixes #1118.

Fixes #1119.

Apparently `split` does not work the way I'd expect.

Fixes #1050.

This makes viewing images work. Fixes #1111.

See #1109.

Fixes #1101.

See #1103.

Fixes #1062.

Fixes it not being included in the optimized build as well as making it
more consistent.