fixes #8735 - enable config drive on Rackspace servers
fixes #8739 - use global setting when hostgroup root_pass is blank

A blank (not nil) root_pass on hostgroups was preventing correct inheritance
from settings in both hosts and nested hostgroups.

root_pass was also being copied from parents/settings to hostgroups when they
were saved, when it should remain blank to continue inheriting.  Only hosts
are meant to copy the password on save.
fixes #8676 - tar foreman-debug results including the parent directory
Fixes #8747 - Temporary pin for google_api_client gem
Added change_password feature.

The administrator can now force a user to change their password upon login. If
the force_password_reset flag is true, the user is taken to a page which asks
the user for their new password and to confirm it. Then it forwards the user to
the original url they were trying to visit if available.