Fix repeat field list to allow some fields to be unspecified.
Fix problem in continuation_url handling in authentication code.
Correct some authorization bugs; still need more tests
Update TODO