fixes #2860 - don't convert arbitrary input into symbols (CVE-2013-4180)
fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)
syncing with upstream community-templates
Fixes #2414 - Move puppet report processing code to the report processor

This creates a API route for POST:/api/reports which matches the GET
format for reports. Tests are updated, with the report model tests
moving to the puppet-foreman module (along with the report fixtures).
Fixes #3030 - require facter where necessary
fixes #1923 - matches vms on a compute resource to hosts
Fixes #3045 - Skip empty log arrays
fixes #1871, #1879 - add VPC support to EC2 compute resource

Based on patch from Romain Vrignaud <romain@yakaz.com>
fixes #2288 - Add oVirt/RHEV Quota Support
fixes #3046 - add NIC CRUD, power and boot operations API
fixes #2741 - rails 3 syntax