fixes #5881 - XSS from create/update/destroy notification boxes (CVE-2014-3491)
fixes #6149 - fixed XSS in host YAML view (CVE-2014-3492)
fixes #5773 - redirect to referrer URL that includes page and search