Enforce domain, host header validation against domain setting, Refactoring of PR #1866, Closes #1732

HTTP API: GET /api/dashboards/db/:slug response changed property  to  to match the POST request nameing, Fixes #1928

Auth: Support for user authentication via reverse proxy header (like X-Authenticated-User, or X-WEBAUTH-USER), Closes #1921

Organization: You can now update the organization user role directly (without removing and readding the organization user). Closes #1899

Final polish on panel & row repeats, #1888, still some missing places where scopedVars needs to be used

Templating: Support for search filtering and keyboard up/down filtering in the new multi variable value selector dropdown, #1144

Fix the first CLA link.

Conflicts:
	conf/sample.ini

Fixed XSS issue with file based dashboards, was really casued by an issue with alertSrv accepting html in message alerts

Conflicts:
	public/app/features/templating/templateValuesSrv.js