Authentication:
- Support for "multi", which is an extension of Basic authentication,
plus accepting the special "readonly" username (unsurprisingly providing
read-only access)
- Injecting auth.User in martini on all authentication methods (new
method signatures require this)

Not auditing forget-hostname-resolves. Too common to be interesting.

More frequent expiring of hostname resolves and instances