Fixes #4884 : remove duplicate slashes from the gravatar url

The issue is that request.protocol returns http:// instead of http. The code assumed no trailing slashes

fixes #4776 - support session[:expires_at] for api requests

There are situations where the UI needs to invoke requests
on the API controllers; therefore, we need to ensure that
the session expiration accounts for them. This is a common
for plugins, such as Katello, which leverage the...

fixes #4804 - sort organizations by title

fixes #2954 - string extraction fixed on welcome page

fixes #3214 - set taxonomy for hosts created via Puppet from facts or a default setting

fixes #4733 lookup keys in puppet class form visual changes

fixes #4555 add ca certificate to ovirt

fixes #4457 - Session fixation, new session IDs are not generated on login (CVE-2014-0090)

fixes #4456 - XSS on 500 error page and bookmark name causing render error (CVE-2014-0089)

Fixes #4680 - Don't append periods to unqualified unmanaged hosts