Prevent changing a domain's owning organization.

[#77223122]
Remove domain_guids and private_domain_guids from create/update on org.

[#77223122]
Remove unusable nested domain routes from organization.

- make nested routes configurable
- backfill tests for nested routes.

[#77223122]
Return env variable groups as part of apps environment

[#77737776]

Signed-off-by: Matthew Sykes <matthew.sykes@gmail.com>
Return last update date for app bits on apps endpoint

[#77225528]

Signed-off-by: Matthew Sykes <matthew.sykes@gmail.com>
Add Service Creation feature flag

[#65996262]
Stopped apps no longer count against org and space quotas.

[#77121466]

Signed-off-by: Zach Robinson <zrobinson@pivotallabs.com>
Extracted app memory calculation for quotas into separate class.

- also provide defaults for instances and memory instead of having
a separate method

[#77121466]
Bumped API version for environment variable groups

[#76748548]
Allow cross-origin requests from whitelisted domains

 - Allow simple requests from the whitelist (cc.allowed_cors_domains config parameter)
 - Allow authenticated requests from whitelist (there's not much in CC that's useful without authentication)
 - Allow any requested request headers since we're not sensitive to these (echo back the list of requested headers)
 - Whitelist all response headers that we actually send
 - Respond to pre-flight (options) requests for non-simple requests
   - Get/Put/Post/Delete are allowed (and only these are allowed)
   - Content-Type and Authorization request headers are explicitly ok
 - In conformance to the spec, non-matching requests are ignored, matching requests have headers added, matching pre-flight requests return 200 status with no body
 - Avoid test pollution between front and base_controller
   - /test_endpoint was defined by both controllers leading to confusing results in front_controller_spec when base_controller_spec happened to run first

[#77484582]

Signed-off-by: Michael Fraenkel <fraenkel@us.ibm.com>
Validate the presence of quota definition on an Org

* Move validations to before_save
* Default quota applied only on create
* Prevent nil quota definition on update

[#77090796]

Signed-off-by: Matthew Sykes <matthew.sykes@gmail.com>
Update to ruby 2.1, and related changes to fix immediate failures.

[#70710962]
Upgrading to cf-uaa-lib 3.1.0.

- still pointing to Jim's fork, waiting on a PR to be accepted by UAA
- Uaa gem now needs skip_ssl_validation

[#70710962]
Upgraded all gems, except Rubocop.

[#70710962]
Update cf-uaa-lib to latest master

[#70710962]
Upgrade to ruby 2.1.2

[#70710962]
Reverting mysql to 0.3.13 due to "undefined symbol" issue during deploy

- error is "undefined symbol: mysql_get_client_info"
- see https://github.com/brianmario/mysql2/issues/460 for possibly-related issue with post-0.3.13 versions of the gem.
Use ruby 1.9 for nginix new relic plugin
Revert "Use ruby 1.9 for nginix new relic plugin"

This reverts commit 6d1670f7a3f0d5a7f5a8815bf17065db458171d6.
Validate that instance_memory_limit cannot be less than -1

* For both SpaceQuotaDefinition and QuotaDefinition
* -1 indicates infinite memory limit for instance_memory limit, default
  in db

[#77844078]