Don't modify the session on every request; only modify it when the remember cookie needs to be set
Adds a test to ensure that empty sessions are not modified
Merge pull request #98 from bslatkin/master

Don't modify the Flask session unless there's a reason to
version 0.2.5
ref #101: if availabe, use X-Forwarded-For header instead of request.remote_addr for the session protectin id
Merge pull request #102 from noise/master

If available, use X-Forwarded-For header instead of request.remote_addr for the session protectin id
Add config options to disable login managers.
Clarify documentation on disabling logins.
Merge pull request #104 from porterjamesj/login_disable

Add options to disable the login decorators.
version 0.2.6
fixing SECRET_KEY encode
Merge pull request #107 from papaeye/fix-secret-key

Fix SECRET_KEY encode in Python 2
Merge remote-tracking branch 'upstream/master'