fixes #5436 - provisioning templates are world accessible

(cherry picked from commit aa0ebe8eef311875695135c1714cb09225e8cd13)

fixes #4457 - Session fixation, new session IDs are not generated on login (CVE-2014-0090)

(cherry picked from commit cfa4b52638173b9cf77ee1a5fd0c3a273f875209)

Conflicts:
test/functional/users_controller_test.rb

fixes #4456 - XSS on 500 error page and bookmark name causing render error (CVE-2014-0089)

(cherry picked from commit 69e46d6d6eb230f3aa4236838999284dfffccb6e)

Fixes #4680 - Don't append periods to unqualified unmanaged hosts

(cherry picked from commit 014c9ab5eb9bb9b8d655d48a8ccd540613390788)

Revert "Fixes #2270 - Detect all OpenStack IPs and test which allows SSH"

This reverts commit eb1bba78e89b21ac1e935c2cfd7dbf7c23e1c646.

In light of #4616 and #4710, further issues with this change were found which
means we need more time to solve it completely and ensure full cross-provider...

Revert "Fixes #4616 - Add a Fog mixin for looking up EC2 IP addresses"

This reverts commit 97c45d66a0066b6abbf486511aa4f93c67e52007.

fixes #4669 - HostMailer summary method refers to undefined variable

(cherry picked from commit 7966448c3cf6ae6194e6800e570668d3c65d2c25)

fixes #4314 - ignore default scope ordering on host search by puppet class

(cherry picked from commit a44dd0943b5ccc2c2e9a0ce264e4b2f38b5edd4d)

Conflicts:
app/models/concerns/hostext/search.rb

fixes #4626 - update Facter calls for 2.0 compatibility

(cherry picked from commit 312042b0ddd557fb42f67ba7424020b8dde72da2)

Conflicts:
app/models/setting/general.rb
app/models/setting/provisioning.rb

Fixes #4616 - Add a Fog mixin for looking up EC2 IP addresses

(cherry picked from commit 4963a970e3ee2a91835f4ab5a493179d96cdeedf)