fixes #5881 - XSS from create/update/destroy notification boxes (CVE-2014-3491)
fixes #6149 - fixed XSS in host YAML view (CVE-2014-3492)
i18n - extracting new, updating rails, pulling from tx
fixes #5566 - free text fact values query produces invalid SQL error
Fixes #6160 - don't validate images for network based provisioning
fixes #6228 - disable provisioning method radio boxes after host is provisioned
fixes #6003 - don't render user default loc/org object directly
fixes #5777 - search on filters returns error
fixes #6067 - UI inconsistency around root password limit 8 characters
fixes #5928 - added selinux info to foreman-debug
fixes #6248 - API V2 return object for POST/PUT/DELETE should *not* include root node