Fixed 500 error on invalid order_by parameter; closes #755
BACKWARDS-INCOMPATIBLE: Format Hardening Release

Format Hardening Security Release

* XML decoding has been wrapped in the defusedxml library
* XML requests may no longer include DTDs by default
* Deserialization will return HTTP 400 for any XML decode errors
* Add `TASTYPIE_DEFAULT_FORMATS` setting to globally restrict the set of
  supported formats (closes #833)
* Content negotiation will return an error for malformed accept headers (closes #832)
* The Api class itself now allows a custom serializer (closes #817)
* The serialization documentation has been upgraded with security advice

Backwards-incompatible changes:

* XML serialization:
    - defusedxml is now required
    - defusedxml requires lxml 3 or later

    ``pip install defusedxml "lxml>=3"``
* Python 2.5 is no longer officially supported because defusedxml requires
  Python 2.6 or later.
fixed authorization if auth function returns False

* added mock to allow easier overwritting of auth
  functions
* tested when authorization *_detail function returns
  False - tests were failing. i.e. request was
  authorized, when it shouldn't have been
* updated code to raise an Unauthorized if *_detail
  functions return False
Added versiontools support!
Added in rose for simpler versioning.
Bumped to v0.9.13!
Removed rose. Bumped to v0.9.14!
Updated stray 0.9.13 references
Docs: add release notes section

* Added index links
* Added release notes for 0.9.13
"""``use_in`` was not being properly used for various ``list`` endpoints"""
"""enhanced tests for ``use_in``"""

Thanks to @cristiano2lopes for pointing this out, fixing the actual issue and writing some of the tests. Fixes #841.
Error handling: better logging exc_info usage

A simple True will do - the logging module just checks that exc_info is
not false.
Resource: send got_request_exception on errors

The Resource _handle_500 method will now dispatch
django.core.signals.got_request_exception during exception processing.
This makes tastypie play nicely with sentry and any other apps listening
in for exceptions.

Thanks to Andrew McCloud (@amccloud) for the patch!

NOTE: the mock library was added to the test requirements to simplify
      this and other tests.

Closes #827