Clarified that constant_time_compare doesn't protect string lengths.
Fixed #18447 -- Made LazyObject unwrap on dict access.

Thanks Roman Gladkov and Zbigniew Siciarz.
Fixed #19456 -- Avoid infinite recursion when tracing LazyObject.__init__.

Thanks blaze33 for the patch.
Fixed #19968 -- Dropped support for PostgreSQL < 8.4.
Update versions and links to source tarballs.
Fixed #13260 -- Quoted arguments interpolated in URLs in reverse.
Fix for bug #6363.
Created new admin template unauthorized_user.html to be displayed when the user
is authenticated but is not authorized.
Removed permission checking from the admin authentication form.
Merge branch 'master' of github.com:django/django