fixes #13974 - remove nested arrays passed to AR finders

Passing a nested array to Active Record finder methods is deprecated in
Rails 4.2 and will be removed, they must be flattened first.