Refs #3809 - Turning on some rubocop cops

refs #14691 - user editing self should not change User.current

Rather than changing the behaviour of #to_label to return persisted
data, the User.current object should not be modified with unsaved data
from the form submission or API update.

User.current is used for authz as well as for display purposes, so...

fixes #14502 - fix documentation of the hosts controller for puppetclass_ids

previously it wrongly stated that the parameter is called
puppet_class_ids

Fixes #14503 - don't join reports with the logs and resources explicitly in API

Using `.includes(:logs => [:message, :source])` in the search scope
for reports caused serious performance issues (ending up with server
taking all of its memory). I've found no reason for the `includes` to...

Fixes #5816 - allow editing and displaying self via API

fixes #12746 - list compute resources from plugin definitions

Load the full list of known CRs from plugins on the fly, instead of
modifying the class-level list of supported plugins. Since plugin
definitions don't get reloaded, this allows the ComputeResource class to...

Fixes #14182 - authorize role index

Fixes #13896 - Rename Anonymous role to Default role

fixes #13828 - CVE-2016-2100 - only showing relevant bookmarks

Fixes #13554 - Setting releated to taxonomies shouldn't be shown if they are disabled