Fixes #6695: Adding two OS parameters with same name should raise an error
Fixes #5088 - adding location_ids and organizations_ids to apidocs of taxable resources
Fixes #2524 - adding taxonomy scope parameters
Fixes #6999 - protect user logout against CSRF requests (CVE-2014-3590)

To avoid CSRF, logout is changed to be a POST request so
protect_from_forgery checks the CSRF token. However, in Rails 3 the only
strategy available is to nullify the session of the attacker.
We modify this behavior to raise a Foreman Exception.
This issue is probably worth revisiting on the update to Rails 4 as
throwing an exception is a valid strategy again.
Fixes #7483 - Use hidden input value to hold raw template contents (CVE-2014-3653)
fixes #5811 - Validates emails to RFC 5322 specification
Fixes #7639 - Remove tooltip for storage/network sections in  Edit Compute Profile
Fixes #7592 - flipped the order of logged-in user menu
fixes #2127: added support for root password hashing other than MD5
Fixes #7491 - moved default org and default location to same tab as org/loc selection
fixes #7584 - add Authorizable module to class AuthSource
squash this commit