dont ignore vendors, not everybody knows how to work with composer
better composer message
this should be wrapped in an extra array.
.htaccess file check added
Prevent that the charset is set twice
Remove custom headers from frontend
Decent output in production

Don't just throw errors when in production mode, this is developer information,
and shouldn't be handled as an exception, as it is probably an invalid request.
Cleanup
Changelog fixed
The 3.6.1 version was delayed because of different bugs but the changelog was already prepared for the release. This commit unsets the date of the 3.6.1 release.
Authentication: do not allow God users to access uninstalled modules.

As a God user you are granted access to any module, even if it was not
installed. This caused database exceptions (missing tables) when
accessing the groups rights interface. This interface uses the
filesystem to list available modules and validated this with the
isAllowedX methods. This always returned true for God users.

Fixes #538
BitDeli analytics added to the readme
BitDeli is a free way to track visitors on GitHub: https://bitdeli.com/free.
Do not expose composer and markdown files to the outside.
GA tracking code wasn't set properly
GA tracking code bug added to changelog
Users: bugfix: do not wrap delimiters in an array.

Fixes #493.
Resolve changelog conflict.
Kernel: use T_COMMENT instead of T_DOC_COMMENT.

Fixes #529
Tx to @malukenho
Merge branch 'master' into config-not-found
Decent output in production

Don't just throw errors when in production mode, this is developer information,
and shouldn't be handled as an exception, as it is probably an invalid request.
Merge pull request #539 from forkcms/config-not-found

Decent output in production