Disallow email/address enumeration
Update plupload
Don't render default layout with error (hide admin menu)
Update error layout
Merge branch 'security-updates'