Fixes #537 - Upgrade Rails wrt CVE-2014-3482

It was determined that supermarket is *not vulnerable* to this
vulnerability. However, we should upgrade to the latest version of
Rails, for posterity's sake.

CHEF posted about the vulnerability on our blog:

* http://www.getchef.com/blog/2014/07/02/chef-rails-cve-2014-3482/
Merge pull request #538 from opscode/jtimberman/CVE-2014-3482

Fixes #537 - Upgrade Rails wrt CVE-2014-3482
Fixes #536 - add download_url to /universe

When retrieving the universe from supermarket, it should contain
`download_url` - the full URL for downloading the cookbook. This
restores the full URL from `location_path` prior to PR #520, while
maintaining compatibility with berkshelf.

* implement download_url data for /universe
  - renames #download_path to #location_path
  - add #download_url method and constant
  - add #protocol_host_port method as it will be used by #download_url
    and #location_path
* use example.com like the RFC suggests; we dont own narf.com :)
allow admins to combine and delete CCLAs
adding a search scope to CclaSignature
refactor the combine! method
Style organization management view

Write some copy and style organization management view.
ensure no duplicate contributors
strip admin privileges of incoming contributors
cleanup redundant method use

* build the protocol+host+port outside the loop so we don't calculate
  that for every cookbook
* remove unnecessary method location_path
* update method signature for download_url
* update tests
match new corrected number of arguments for download_url
Merge pull request #539 from opscode/jtimberman/universe-download-url

Fixes #536 - add download_url to /universe
Import all pull request commit authors.

Instead of Curry importing just unauthorized or unknown commit authors,
import all commit authors in a pull request and set the
authorized_to_contribute attribute on the Curry::CommitAuthor
appropriately. This is a more comprehensive way of tracking
authorization state for commit authors.
Rename method: import_{unauthorized_,}commit_authors
Add spec to protect against btm-like scenarios
Upgrade rails to 4.1.4.
Merge pull request #542 from opscode/rails_4_1_4

Upgrade Rails to 4.1.4.
Merge pull request #543 from opscode/curry-imports-all-commit-authors

Curry imports all commit authors
Merge pull request #521 from opscode/combine-ccla-orgs

Allow admins to combine and delete CCLAs
Give environment-specific overrides precedence