fixes #4683 multi select filter and select/deselect all are not working
fixes #4138 orgs list when the number of orgs is huge
fixes #4682 - smart variable for a puppet class not showing in UI
fixes #4703 - reset_counters doesn't work for has_many :through relationships on rails 3.2.8
Fixes #4680 - Don't append periods to unqualified unmanaged hosts
fixes #4456 - XSS on 500 error page and bookmark name causing render error (CVE-2014-0089)
fixes #4457 - Session fixation, new session IDs are not generated on login (CVE-2014-0090)
fixes #4555 add ca certificate to ovirt
fixes #4733 lookup keys in puppet class form visual changes
fixes #4828 - pin rake for Ruby 1.8 compatibility
fixes #3214 - set taxonomy for hosts created via Puppet from facts or a default setting
fixes #2954 - string extraction fixed on welcome page
fixes #4804 - sort organizations by title
fixes #4794 - precompile filters.js and taxonomy_edit.js files
fixes #4776 - support session[:expires_at] for api requests

There are situations where the UI needs to invoke requests
on the API controllers; therefore, we need to ensure that
the session expiration accounts for them.  This is a common
for plugins, such as Katello, which leverage the
APIs extensively to support both the web UI and CLI.

With these changes, if an API request is received with
session[:expires_at], it will be evaluated and updated by the
server.  This will be the case for requests from the web-UI.

If an API request is received without session[:expires_at],
no evaluation or updating of an expiration timer will
be performed.  This latter case is the existing behavior
for the API requests (e.g via API or CLI) and will continue
to be supported.
Fixes #4884 : remove duplicate slashes from the gravatar url

The issue is that request.protocol returns http:// instead of http. The code assumed no trailing slashes
Fixes #4679 - Downcase fqdn to match Puppet SSL certs casing
fixes #4672 - added template_name template variable