HUE-2372 [search] Move 'add a dimension' to the left

Changed dimensions look and feel
Floated everything to the left for bigger resolutions
Hide legend on barchart if dropped on a small column
[core] Bump Hadoop MR1 plugin to 2.5.0
[oozie] Adding version from metrics as it is unrelated to Oozie
[core] Add CSRF protection to all requests
[core] Add csrf token in non-jQuery requests
HUE-2369 [search] Download query should not included non selected headers
HUE-2387 [beeswax] Support getting logs using FetchResults() api
HUE-2396 [beeswax] Fix Cross-site scripting(XSS) vulnerbility

This change adds proper html encoding to user input and
applies XSS vulnerbility fix to Hue home page and beeswax Query Editor.

Conflicts:
	desktop/core/src/desktop/api.py