Removes results related to entities which are in the recycle bin.
Removed entity has query from tag repo as that's now covered by this.
Removed extra permission application function as its now redundant.
Added tests to cover.

Thanks to Nicol (waterhunter2000) for responsibly reporting.

During validation, added tracking of each time a file reference is used,
so that the total use of files can be validated to help prevent heavy
DoS scenarios.

Thanks to VG for responsibly reporting this scenario

Refreshes the remember me token on password change, so that existing
remember-me sessions are dropped.
This helps invalidate existing remember-me access in scenarios where
passwords are being changed after unauthorized access.
Added test to cover.

Thanks to Semilore Osofisan for responsibly reporting this scenario.

There's only one route that should ignore CSRF, and that's already
marked to not use the CSRF middlware in the routes definition.
Helps prevent potential CSRF based logout from subdomains (same-sites).

Thanks to The Xora team for responsibly reporting.

Ensures proper checking of page-based visibility, ensuring that the
draft status of the related page is also considered when checking view
ability.

Thanks to Huzaifa Dal for responsibly reporting.

Uses the same access/visibilty check via query as the API,
and prevents actions when page is in the recycle bin.
Adds tests to cover access.

Thanks to CayCon for reporting.
Thanks to VulnCheck for coordinating reporting.

Updates book/chapter conversion to ensure that child items in the
recycle bin are handled & migrated instead of being deleted along
with their old container/parent.

Thanks to Tanna Zu for reporting.

Prevents wrong diffing against user draft versions.

Thanks to Dickson Wu (SEAL & CertiK) for reporting.

Extra checks to address prior holes, which were covered
by prior commit 926e16a

Thanks to Zeng Yu for reporting.

Updated validation to instead check for a valid integer, so the existance
if performed as part of the visibility check, preventing different
responses between non-existing and non-visible, so that it can't be used
to inidcate non-visible pages.

Added tests to cover.
Thanks to Efe Çam for reporting.