mod_http_avatar: Fix displaying the fallback on Firefox

mod_invites_page: Move the JS script to its own file

mod_invites_page: Replace jQuery with vanilla.js in the HTML

mod_register_apps: Add Renga to the list of supported clients

mod_http_oauth2: Make defaults more secure This should be fine since we don't have a lot of clients to be backwards-compatible with.

mod_http_oauth2: Skip consent screen if requested by client and same scopes already granted This follows the intent behind the OpenID Connect 'prompt' parameter when it does not include the 'consent' keyword, that is the client wishes to skip the consent screen. If the user has already granted the exact same scopes to the exact same client in the past, then one can assume that they may grant it again.

mod_audit: Replace argument parsing debug print() with debug logging prosodyctl -v to view

mod_audit_register: Include hostpart with audit events here too mod_audit seems to expect this to be JIDs, not bare usernames.

mod_audit_auth: Include hostpart with audit events mod_audit seems to expect this to be JIDs, not bare usernames.

mod_audit: Fix storing IP prefixes Was essentially calling new_ip(new_ip())