fixes #2109 - improve session token security

- adds security:generate token rake task to create static token
- generate and cache a token on startup if static token isn't present

Thanks to Sandor Szücs <sandor.szuecs@fu-berlin.de>

fixes #1890 api host status

fixes #1991 expire topbar cache on user when restart server

refs #1991 - Cache not cleared prevent location / org feature to show up

1. ensures settings cache is removed when app starts
we can't remove all cache, with Rails.cache.clear as that might lead to issues
with people using memcache with multiple foreman instances (e.g. we can clear...

fixes #2037 remove catchall routes

this blocks any plugin/engine from adding additional routes

host routes api changes squashed

Turn off the apipie validations for now

The main reason for the validations to be implemented in Apipie was
the ability to be able to check the documentation against the code:
i.e. it can discover inconsistencies between the documentation and
the actual code that uses the API....

fixes #1994 - set vardir for puppet 3, use --configprint

When running Puppet 3 as a non-root user (i.e. foreman), both --confdir and
--vardir have to be specified as per Puppet #16637, else SSL settings dependent
on vardir will fail.

This adds a new puppetvardir setting used with puppetconfdir, and supports...

replaced default taxonomy migration with a multiple actions for assigning hosts to orgs and locations.

added template_kinds controller to api