test '_userId' instead of session.userId
Merge branch 'master' into develop
try only allowing _userId subscriptions on client routes (memory leak
attempt, see see http://goo.gl/TPYIt)
try only allowing _userId subscriptions on client routes (memory leak
attempt, see see http://goo.gl/TPYIt)
when redirecting to /?play=1, we get access-denied for
model.session.userId for some reason. seems user initialization
happens during that process, so we just do another page refresh and
we're good
match derbyAuth errback on invalidated session
check invalidated session on somre more paths
remove nodetime, freeze browserify@1.17.3
remove nodetime, freeze browserify@1.17.3
for now accept invalidated sessions in sotre
fix to previous
add check on isServer in busted session, accept(false)
Merge branch 'develop'