Fixes #5088 - adding location_ids and organizations_ids to apidocs of taxable resources
Fixes #2524 - adding taxonomy scope parameters
Fixes #6999 - protect user logout against CSRF requests (CVE-2014-3590)

To avoid CSRF, logout is changed to be a POST request so
protect_from_forgery checks the CSRF token. However, in Rails 3 the only
strategy available is to nullify the session of the attacker.
We modify this behavior to raise a Foreman Exception.
This issue is probably worth revisiting on the update to Rails 4 as
throwing an exception is a valid strategy again.
Fixes #7483 - Use hidden input value to hold raw template contents (CVE-2014-3653)
fixes #5811 - Validates emails to RFC 5322 specification
Fixes #7639 - Remove tooltip for storage/network sections in  Edit Compute Profile
Fixes #7592 - flipped the order of logged-in user menu
fixes #2127: added support for root password hashing other than MD5
Fixes #7491 - moved default org and default location to same tab as org/loc selection
refs #2127 - instantiate exception and pass i18n arg correctly
Fixes #7591 - changed Sign out to Log out to fix inconsistent terminology around Login vs Sign Out
Fixes #7393 - searching users by role_id not supported
fixes #4386 - gem friendly_id to simplify find by id, name, label, etc
fixes #7560 - add :required => true on host fields that have conditional validation if host.managed?
Fixes #7572 - remove rundeck from core

Foreman rundeck is now a plugin available in https://github.com/theforeman/foreman_host_rundeck
fixes #7732 - specify join models as Rails 3.2.8 can't reset through associations
refs #2127 - add password_hash to API
Fixes #6549 - Add :tests_to_skip to plugin registration block
fixes #6856 - API v2 - more efficient import puppetclasses for single environment
fixes #7608 proposed patch