Fixes #11579 - Reports show/destroy restricted by host authorization (CVE-2015-5233)

ReportsController 'show' and 'destroy' now perform a check to see if
the User is authorized to see the Host associated with the Report. In
case it's not, it returns 404, as to not give hints whether a Report...

Fixes #11031 - ignore identifiers of interfaces being destroyed

(cherry picked from commit 1e7822a586b6e4f288823df0b9419ef2749d6b8c)

fixes #11719 - mysql2 dep must match ActiveRecord's runtime dep

When AR loads the mysql2 adapter, it calls 'gem' with a version spec.
For our bundle to include a compatible version of mysql2 and not the
latest version, the spec needs to match AR's.

(cherry picked from commit 47604a20219bdf0f6c72fde9dabd3f47f0513364)

Release 1.8.3

refs #10867 - bool cast compatibility with 1.8

Fixes #10915 - Deleting a host removes all host specific overrides

(cherry picked from commit 674755f43684f76e6b23ca499a57153aad3db5e2)

Fixes #10867 - OpenStack boot_from_volume is true only when checked

(cherry picked from commit 776cff93637b006cb69063fecf142e776acd1378)

Fixes #10607 - match bonds based on identifier only

(cherry picked from commit 7be20b248502eb8682008e1c6b03fef71da4f73d)

Fixes #10888 - skip attached_to updates if identifier was blank

(cherry picked from commit db6d6b8b7d0d2e90e27d4c23308e5db26abd3820)

Release 1.8.2