Using RSA public/private key pairs to exchange password information.
Upgrade password storage from SHA1 to Blowfish with salts for both users
and onsite portal users
Move user passwords to separate table (users_secure)
Backwards compatability changes for systems that without support for
CRYPT_BLOWFISH. SHA1 + SALT is used instead
Implementation of Optional privileged database user + HOWTO documentation
Bug fix for document upload.  Document entry is no longer created in
database if file upload fails. Also whitespace cleanup (tabs to spaces)
Converted encounter form to new security model
Logic fix in user verification.