More of the same.
Tweaked handing of session variable save/fetch.
Support for more powerful join handling.
Support site name configuration variable.
Preparing auth setup to support per-method reset/activation support.
Support for per-AuthMethod control of recovery and activation.

Note that this still requires the webapp to do work to perform the activation or recovery.