fixes #3160 - sanitize host/host group names in lookup_value associations (CVE-2013-4386)
fixes #2981 - adding plugins repo to foreman-release

(cherry picked from commit 648a248b4468a859dcbfcfc38b026f9975b6fa81)
fixes #3106 - consistent sorting of common parameters by name

(cherry picked from commit 189f9f34fe20aea60e86417c90b99dcea64f3e37)
fixes #3180 - displaying array values in settings ui correctly

(cherry picked from commit be7300f828e31bd4ed3a4c0d175965daa94c0a24)
fixes #3133 - fix security group filtering when no groups need filtering

(cherry picked from commit 68522ec81c0b64df5306165f4e1be95728158600)
fixes #2756 - update setting descriptions at startup

(cherry picked from commit 3315ec5797fe692adc6361a928ad1a5cea658ca6)
fixes #3202 - PG constraints deferred and change destroy_all to delete_all

(cherry picked from commit c520fc00e8038603f07df5b535a19488e40e5c71)
fixes #3048 - Non Admin user fails to override parameters when creating new host

(cherry picked from commit 06909647beeae040680d0dd50ee8a8f10bf1b577)

This commit has wrong issue number, is should be: #3076
fixes #3207 avoid extra validation calls when importing a report

(cherry picked from commit 944be82b5d330abdbfefae25eb19946cb7ae72ad)
Fixes #3208 - print warnings for old enc/report routes
Changing plugins url to point to 1.3
Release 1.3.0-RC4
fixes #3241 - default password is now MD5

(cherry picked from commit b93373a828578f941d4020c70682bbe1409d28cd)
fixes #3190 - Fix STI auditable_type - Audit should say updated Location/Organization rather than updated Taxonomy and ComputeResource should not use STI class

(cherry picked from commit 409d7f190c638b25314cd2b590578284a9b4aec1)
fixes #3206 - prevent any user including admin from creating lookup_value with fdqn= or hostgroup= if host/hostgroup does not exist

(cherry picked from commit bd48d5c935d18adfe6dcf4cf06285354e44fe522)
fixes #3218 - Remove Double calls to CR provider when creating a new host.

(cherry picked from commit db062299a69a4a0d3acd929ea9931fcb969a00c8)
fixes #3111 - v2 API calls to /api/[class]/[object]/parameters/[parameter] return wrong object

(cherry picked from commit 9d743410afc311dc96ba6653ae5787181d197dcf)
Fixes #2875: only show URL and description for a CR if they exist

(cherry picked from commit 5cd5a557bcb73c36c571acab0f7fd57c34528931)
fixes #3222 - nil the certname when handling certs if UUID certs have now been disabled

(cherry picked from commit 89e506f7d955b4b440725fb5ef412fb2634cd762)
Adding updated French translations