fixes #3917 - replace protected_attrs with strong parameters

Filtering of attributes has moved from the protected_attributes gem to
strong parameters in controller concerns, to be in line with current
Rails recommendations.

Concerns are shared between UI and both API controllers and list the...

Refs #3809 - Using defaults for AndOr cop

Fixes #15464 - support partials in pagelet keys

Pagelets will be keyed as "#{controller}/#{partial_name}". This
removes a necessity to register a pagelet multiple times if a
partial is reused for different actions.

Refs #3809 - Turning on the AndOr cop

fixes #15622 - add about link for non-admin user

Fixes #13164 - Add view_params permission

A new view_params permission was added for parameters inheriting from
Parameter object. The only exception is global parameters, which are
already handled by filter for CommonParameter resource.

This new permissions is also automatically added to viewer and site...

fixes #9110 - add freeip route to API

Fixes #14546 - ability to restrict *_external_variables
Fixes #14535 - corrects permissions for smart class parameters

Fixes #14969 - correctly reload custom statuses

Refs #3809 - Turning on some rubocop cops