fixes #5881 - XSS from create/update/destroy notification boxes (CVE-2014-3491)
fixes #6149 - fixed XSS in host YAML view (CVE-2014-3492)
i18n - extracting new, updating rails, pulling from tx
fixes #5566 - free text fact values query produces invalid SQL error
Fixes #6160 - don't validate images for network based provisioning
fixes #6228 - disable provisioning method radio boxes after host is provisioned
fixes #6003 - don't render user default loc/org object directly