fixes #5612 - use correct permissions for authz in parameters API

fixes #5506 - added scoped search to SmartProxy for UI and API v2

fixes #4204 - add config groups feature - assign multiple config groups to a host or hostgroup

fixes #3914 - set current taxonomies on login from user defaults

fixes #4895 - Adds CSRF protection check to the API if a session user is present

fixes #4806 add support to register compute resource provider from a plugin

fixes #4863 - API V2 - add puppetclasses format style=list and module_name to base.json.rabl

fixes #1809 - foreman realm integration

Fixes #4851: a SmartProxy.with_features scope replaces feature-specific scopes generated during class loading

fixes #4776 - support session[:expires_at] for api requests

There are situations where the UI needs to invoke requests
on the API controllers; therefore, we need to ensure that
the session expiration accounts for them. This is a common
for plugins, such as Katello, which leverage the...