Add unittest to check that session cookie set at logout is httponly
Escape add-on search string on "add to collection" (bug 780438)
prevent xss from UserProfile.display_name on admin deletion (bug 835827)
Adding DRF views/urls for users (bug 980999)
don't leak information on username/password when recaptcha is invalid on login page (bug 802771)
Fix improperly use of the footer element (bug 764605)
csrf protect delete_icon view in bandwagon (bug 967529)
Do not reset queue when updating a new version of an addon under review (bug 717495)
dirty hack to serve django-debug-toolbar's statics, monkeypatch django.core.urlresolvers.resolve
upgrade Django to version 1.6.4
Remove clean_redis from cron.
migration
Merge pull request #70 from jasonthomas/clean-redis

Remove clean_redis from cron.
change waffle table to work with new user model
proper type for last_login column (bug 1006482)
fix for mysql 5.7
change some more sql around
Merge pull request #65 from magopian/update-django-1.6.4

upgrade Django to version 1.6.4
sent password reset email even for getpersonas migrated accounts (bug 998477)
Merge pull request #43 from davidbgk/764605-footer-element

Fix improperly use of the footer element (bug 764605)