Fixes #14264 - improve primary interface selection

(cherry picked from commit 308f611d9bb17173588a6f59c7a914b551923a7b)

fixes #14239 - when creating host from API, set first interface as primary if none set

(cherry picked from commit 38d9333f8e82e45fc6771ea7740e6ea625b97d3f)

fixes #13980 - don't merge NIC compute attrs on New Host form

Removes merging of NIC's compute attributes when refreshing interfaces
on compute profile or resource selections on the New Host form. Instead,
overwrite NIC attributes from the profile (as it did before 85e82d0) as...

fixes #14000 - respect custom controller permissions

Allows controller_permission method to override the permission suffix
used in resource_scope, originally from a63aa7c and removed in bb39df2.

(cherry picked from commit f05b9307fe36d877364b0ee5bee7212c3315c97e)

fixes #13828 - CVE-2016-2100 - only showing relevant bookmarks

(cherry picked from commit a61344da14f73920b4bdc7ad8220e7a0ed998031)

fixes #13852 - add user_data to images api docs

(cherry picked from commit 1cd4a22df2b4a34ea8a03150b1bd406494587ed3)

Fixes #6241 - Validations for associations with proxies

Fixes #6342 - merge compute profile when attributes in api host#create

API v2 host#craete call now merges user specified compute attributes
with compute profile. UI functionality remains untouched.

Fixes #13257 - nested locations can be created via api

Fixes #13557 - Rubocop enforce specifying a timezone

Rubocop can enforce what timezone to store in the database ,
so we can ensure everything is stored using UTC and we don't
miss these things in code reviews. When objects are displayed,
they must use the time provided by set_timezone in the...