Add katello_satellite_priv_esc.rb

This module exploits a missing authorization vulnerability in the
"update_roles" action of "users" controller of Katello and Red Hat
Satellite (Katello 1.5.0-14 and earlier) by changing the specified
account to an administrator account.
Fix msftidy warnings
Delete commas
Land #3138, @rcvalle's exploit for CVE-2013-2143