calls to s3 should use https and river page should call locally
roll back https on s3 calls because of cert warnings
url decode incoming params
actually, don't
define the river json url within the api
clean up util structure
extra check for platform needed
actually the  check isn't necessary
log to info, not debug
code cleanup and max val security fix in php api
no radius on password inputs
reference new api files in templates
add php type def to apache template
new globals for 2-factor
new feature: 2-factor authentication
split some functions out of the feeds include
bring back the me page
need to clear session data on logout
adjust ui handling of 2-factor auth
release notes for 052