HUE-2372 [search] Move 'add a dimension' to the left

Changed dimensions look and feel
Floated everything to the left for bigger resolutions
Hide legend on barchart if dropped on a small column
[core] Bump Hadoop MR1 plugin to 2.5.0
[oozie] Adding version from metrics as it is unrelated to Oozie
[core] Add CSRF protection to all requests
[core] Add csrf token in non-jQuery requests
HUE-2369 [search] Download query should not included non selected headers
HUE-2387 [beeswax] Support getting logs using FetchResults() api
HUE-2396 [beeswax] Fix Cross-site scripting(XSS) vulnerbility

This change adds proper html encoding to user input and
applies XSS vulnerbility fix to Hue home page and beeswax Query Editor.

Conflicts:
	desktop/core/src/desktop/api.py
HUE-2398 [fb] Drag and Drop hover message should not appear when elements originating in DOM are dragged

Added dragstart/dragend event listeners to body inorder to determine if dragged elements originated outside DOM
HUE-2400 [core] The CSRF protection breaks some apps

Moved the XMLHttpRequest.send hack outside document.ready
HUE-2395 [search] Broken widget in Solr Apache logs example

Fixed call to a possibly undefined JS method
Fixed z-index of Search Bar
HUE-2401 [search] Visually report selected and excluded values for ranges too

Added labels and css classes
HUE-2373 [search] Heatmap can break

Toggled visibility on Selected dimensions labels
Fixed problem with multibarChart when no data is available
Fixed problem with pieChart when the slices have value of 0
[core] Cache permission list and remove unused middlewares

This avoids tens of SQL queries and use of useless inspects calls.