Add unittest to check that session cookie set at logout is httponly
Escape add-on search string on "add to collection" (bug 780438)
prevent xss from UserProfile.display_name on admin deletion (bug 835827)
don't leak information on username/password when recaptcha is invalid on login page (bug 802771)
Fix improperly use of the footer element (bug 764605)
csrf protect delete_icon view in bandwagon (bug 967529)
Do not reset queue when updating a new version of an addon under review (bug 717495)
display paypal error in the contribution popup (bug 997695)
dirty hack to serve django-debug-toolbar's statics, monkeypatch django.core.urlresolvers.resolve
Switch to custom user model (bug 558514)
Merge pull request #57 from magopian/997695-paypal-contributions

display paypal error in the contribution popup
Script conversion from Serbian Cyrillic to Latin (20140505)
upgrade Django to version 1.6.4
Merge pull request #63 from washort/custom-user-model

Switch to custom user model (bug 558514)
Merge pull request #69 from flodolo/20140505

Update sr-Latn using sr (Cyrillic) content converted with icu4c
Remove clean_redis from cron.
migration
Merge pull request #70 from jasonthomas/clean-redis

Remove clean_redis from cron.
change waffle table to work with new user model
proper type for last_login column (bug 1006482)