update to rails 3.0.20 to address CVE-2013-0333

changes to taxonomies_controller

clone action, view, tests

fixes #2033 - Cannot assign a host to an org

Now its possible to change Locations / Organizations only via mass assign

fixes #2001 - Changing Loc or Org after compute resource selection give 500 error

fixes #2151 - use DN environment variable instead of CN

nginx is unable to pass bits of the X.509 subject, only the entire DN, so
support that as a lowest common denominator.

[test] renamed wrong class name

fixes #2147 - param classes with multiple matchers are evaluated incorrectly

fixes #2121, #2069 - restrict importers and ENC to puppetmasters and users

CVE-2013-0171: report and fact importers parse YAML directly from the remote
host without authentication. Untrusted YAML can instantiate objects and be
used to exploit Foreman.

CVE-2013-0174: external nodes (ENC) output is available to any source and...

fixes #2069 - use a random salt when saving the root password

CVE-2013-0173: insecure fixed salt "foreman" for passwords