Allow passing in auth callback url in config.
Use debug for messages.
Use a more reasonable method of getting settings.
Protect the views: only logged-in users should be able to access them.
Handle dates before 1970.
Man, some people are OLD\!
Make .all() fetch paginated results, if applicable.

This probably needs testing with non-payroll API calls that happen
to have exactly 100 results.
Add expiry data for PublicCredentials.
Change how the url scope section is added.
This should fix some auth issues.
Add support for new Settings payroll area.

http://developer.xero.com/documentation/payroll-api/settings/
Fix the api.links attribute.
Add support for saving irregular data.

PayItems, for instance, does not follow the pattern of most other
objects: there is no PayItem list inside, instead a set of other
child elements.