fixes #5580 - pin scoped_search for Ruby 1.8 compatibility
fixes #4590 - convert VMware SCSI controller type during creation
refs #5188 - prepare place holder for host details

host details should include subscription status
fixes #5610 - upgrade to Rails 3.2.18
fixes #5612 - use correct permissions for authz in parameters API
fixes #5471 html escape auto-completer values (CVE-2014-0208)