HUE-2372 [search] Move 'add a dimension' to the left

Changed dimensions look and feel
Floated everything to the left for bigger resolutions
Hide legend on barchart if dropped on a small column
[core] Bump Hadoop MR1 plugin to 2.5.0
[oozie] Adding version from metrics as it is unrelated to Oozie
[core] Add CSRF protection to all requests
[core] Add csrf token in non-jQuery requests
HUE-2369 [search] Download query should not included non selected headers
HUE-2387 [beeswax] Support getting logs using FetchResults() api
HUE-2396 [beeswax] Fix Cross-site scripting(XSS) vulnerbility

This change adds proper html encoding to user input and
applies XSS vulnerbility fix to Hue home page and beeswax Query Editor.

Conflicts:
	desktop/core/src/desktop/api.py
HUE-2398 [fb] Drag and Drop hover message should not appear when elements originating in DOM are dragged

Added dragstart/dragend event listeners to body inorder to determine if dragged elements originated outside DOM
HUE-2400 [core] The CSRF protection breaks some apps

Moved the XMLHttpRequest.send hack outside document.ready
HUE-2395 [search] Broken widget in Solr Apache logs example

Fixed call to a possibly undefined JS method
Fixed z-index of Search Bar
HUE-2401 [search] Visually report selected and excluded values for ranges too

Added labels and css classes
HUE-2373 [search] Heatmap can break

Toggled visibility on Selected dimensions labels
Fixed problem with multibarChart when no data is available
Fixed problem with pieChart when the slices have value of 0
HUE-2405 [useradmin] Add enhanced user password policy

If enabled, the default password policy requires a password that:
1. Must be at least 8 characters long;
2. Must contain uppercase and lowercase letters;
3. Must contain at least one number;
4. Must contain at least one special character.

This security fix applies in the following use cases:
1. Create the superuser's password on login page.
2. Edit superuser's profile.
3. Create/Edit a user's password.

Add test_user_admin_password_policy in useradmin.tests
Merge remote-tracking branch 'remotes/origin/testing' into testing