theforeman/foreman — pull request #450 by iNecas (2013-03-04 09:01:26+00:00)
Title: fixes #2275 - include ThreadSession::Cleaner only once

Foreman::ThreadSession::Cleaner was included in Taxonomy concern, which
postponed the session clearing (that should be the first thing to happen in
filters) to phase after :authorize filter, effectively discarding the login
information leading to permission denied.

The ThreadSession::Cleaner should be included only in Api::BaseController.