fixes #4456 - XSS on 500 error page and bookmark name causing render error (CVE-2014-0089)
fixes #4457 - Session fixation, new session IDs are not generated on login (CVE-2014-0090)
fixes #4555 add ca certificate to ovirt
fixes #4733 lookup keys in puppet class form visual changes
fixes #4828 - pin rake for Ruby 1.8 compatibility
fixes #3214 - set taxonomy for hosts created via Puppet from facts or a default setting
fixes #2954 - string extraction fixed on welcome page
fixes #4804 - sort organizations by title