fixes #3917 - replace protected_attrs with strong parameters

Filtering of attributes has moved from the protected_attributes gem to
strong parameters in controller concerns, to be in line with current
Rails recommendations.

Concerns are shared between UI and both API controllers and list the...

fixes #15847 - change mailer helpers from paths to URLs

Use of path helpers in mailers (with Roadie to rewrite to URLs) is
deprecated in Rails 4 and removed in Rails 5, so prefer URL helpers. To
replace URL rewriting and reduce duplication, default_url_options is now...

Fixes #14518, #14516 - status change ignores validations

Fixes #15771 - add :token to the values returned by the API

fixes #15829 - remove ace-rails-ap file modes from app.js

Also removes editor from precompilation list, it's in the main app.js
since fa8353d, and removes unused ACE extensions.

application.js has reduced from 2512 to 2381KiB.

Refs #3809 - Using defaults for AndOr cop

Fixes #15773 - disambiguate table name

Fixes #15037 - Improves editable elements in settings

fixes #15709 - fix SuSE mediapath in PXELinux templates

Fixes #15675 - Improve report expiry performance

Slowness was being caused by an un-needed `.joins` method, which led
rails to creating suboptimal queries. Also removed default ordering for
a bit of extra performance.

I tested on a largeish DB with 3M reports and 6M logs, time was cut by a...