Fixes #6191 - pin pry for ruby 1.8 compat

(cherry picked from commit 52a68af1a97aef03115b357451807f75c8a60d9d)
fixes #5966 - pin execjs for Ruby 1.8 compatibility

(cherry picked from commit bb0d37fc3afa585f889e8064c9a44e97465121a3)
(cherry picked from commit 0fe0d1a5cb5a18315e123411efe541f48f5da402)
fixes #5881 - XSS from create/update/destroy notification boxes (CVE-2014-3491)

Conflicts:
	app/controllers/concerns/foreman/controller/taxonomies_controller.rb
	app/controllers/hostgroups_controller.rb
	app/controllers/roles_controller.rb
fixes #6149 - fixed XSS in host YAML view (CVE-2014-3492)