changed how php get user works to prevent a major flaw.
version change for security update
Merge remote-tracking branch 'upstream/release' into release-patch