check privs on composer.push
Merge remote-tracking branch 'origin/master' into socket.io1.x