Added support for passing multiple decorators to add_view.
Added explanations to docstring.
Add SHA512AuthTktAuthenticationPolicy and deprecate AuthTktAuthenticationPolicy
Get rid of monkeypatch of Request and Response in pyramid.__init__

Added `request.default_request_factory()`, which is now used as the default
request factory in the `Router` constructor instead of using the `Request`
class directly as the default request factory.

Fixes #702
Merge branch 'master' of github.com:Pylons/pyramid
Merge branch 'master' of github.com:Pylons/pyramid
raise exc if view_execution_permitted invoked on non-existant view

fix #299
updated changes
updated docs
typo
Merge branch 'master' of github.com:Pylons/pyramid
explain csrf token stealing potentiality
- Do not allow the userid returned from the ``authenticated_userid`` or the
  userid that is one of the list of principals returned by
  ``effective_principals`` to be either of the strings ``system.Everyone`` or
  ``system.Authenticated`` when any of the built-in authorization policies that
  live in ``pyramid.authentication`` are in use.  These two strings are
  reserved for internal usage by Pyramid and they will not be accepted as valid
  userids.
garden
garden
resolve merge conflict
Merge branch '1.4-branch'
- In the past if a renderer returned ``None``, the body of the resulting
  response would be set explicitly to the empty string.  Instead, now, the body
  is left unchanged, which allows the renderer to set a body itself by using
  e.g. ``request.response.body = b'foo'``.  The body set by the renderer will
  be unmolested on the way out.  See
  https://github.com/Pylons/pyramid/issues/709

Closes #709
garden
Merge branch 'master' of git://github.com/wylee/pyramid into wylee-master