fixes #2630 - restrict assignment of roles to those a user has (CVE-2013-2113)
fixes #2631 - fix remote code execution via controller name (CVE-2013-2121)
Fixes #2632 - extract strings from validation errors
fixes #1938 Foreman shouldn't use the FQDN fact to identify the node when facts are uploaded
fixes #2622 - error messages with HTML properly escaped
Use facts[:operatingsystemrelease] to determined gentoo release
fixes #2633 - enable generate_token rake task to run from elsewhere
fixes #2596 - bumping up gettext-i18n-rails gem version to 0.10.0
fixes #2636 host submit missing progress-bar when installed at sub-domain