[patches] firstboot - only set username/password in url if password is blank
[patches] remove unused regdb.txt patch
This covers the following changes:

* polarssl fixes (for example POODLE attack)
* ath9k backports
* procd fixes
* mac80211 fixes
[patches] revert OpenWRT changeset r42943

Revert hostapd - CVE-2014-3686 fixes because it breaks regdomain settings.
If you apply r43943 you can't set regdomain anymore and will stuck at country
code 98.

$ iw reg get
country 98: DFS-UNSET
	(2402 - 2472 @ 40), (N/A, 20), (N/A)
	(2457 - 2472 @ 15), (N/A, 20), (N/A), PASSIVE-SCAN
	(5170 - 5250 @ 80), (N/A, 17), (N/A)
	(5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS, PASSIVE-SCAN
	(5735 - 5835 @ 80), (N/A, 20), (N/A), PASSIVE-SCAN
	(57240 - 63720 @ 2160), (N/A, 0), (N/A)
$ iw reg set DE      # has no effect at all
$ iw reg get
country 98: DFS-UNSET
	(2402 - 2472 @ 40), (N/A, 20), (N/A)
	(2457 - 2472 @ 15), (N/A, 20), (N/A), PASSIVE-SCAN
	(5170 - 5250 @ 80), (N/A, 17), (N/A)
	(5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS, PASSIVE-SCAN
	(5735 - 5835 @ 80), (N/A, 20), (N/A), PASSIVE-SCAN
	(57240 - 63720 @ 2160), (N/A, 0), (N/A)