fixes #2277 - adds spice html5 support

This also adds a newer version of the web socket proxy (where we
probably need to use an external package instead of vendor it).

we still allow users to use the old XPI based spice client (which would
ensure end to end security as well) via a 'new window' button.
that window would only be allowed currently if you are on firefox on
linux.

Paired with: Amos Benari <abenari@redhat.com>
fixes #2275 - include ThreadSession::Cleaner only once

Foreman::ThreadSession::Cleaner was included in Taxonomy concern,
which postponed the session clearing (that should be the first thing
to happen in filters) to phase after :authorize filter, effectively
discarding the login information leading to permission denied.
fixes #2274 renamed test/unit/orchestration.rb to test/unit/orchestration_test.rb
fixes #2263 search Hostgroup by label