fixes #13974 - remove nested arrays passed to AR finders

Passing a nested array to Active Record finder methods is deprecated in
Rails 4.2 and will be removed, they must be flattened first.

fixes #13817 - test certificate.subject_alternative_names for presence

Otherwise certificate SAN test is always true even with no SAN. This
results in request_hosts being empty and thus ENC authentication fails.

With test by Dominic Cleal <dominic@cleal.org>

fixes #13828 - CVE-2016-2100 - only showing relevant bookmarks

Refs #12911 - Fixing colon method calls

fixes #13039 - remove TemplateKind DB calls from UnattendedCtlr

UnattendedController created actions/methods during initialisation per
known TemplateKind, relying on the DB being populated. This caused
ordering issues when a plugin loaded the controller in a test...

Fixes #12754 - adds permission name to 403 page

fixes #12127 - verify x509 subject alternative names when authenticating a smart proxy

Fixes #11921 - load dynamic features during runtime

Refs #3809 - Enable cop Style/AlignArray

Fixes #10713 - improved backtrace logging

• full trace in 500 page in production shows really the full trace
• Foreman::Logging.exception as an unified entry point for exceptions logging
• the backtrace cleaner doesn't delete the plugins
• the orchestration exceptions gets the backtrace covered by logger...