Add 'meteor list-sites' command
Return immediately if not logged in on 'meteor list-sites'
Split logoutOtherClients into two methods.

One method call gives you a new token, and another method call removes
all but the current token. Meteor.logoutOtherClients calls both these
methods, and calls the user's callback when the second has returned.
whitespace and use 'self' instead of 'this'
Add comments to logoutOtherClients methods
Oauth Pending Credentials - even cleaner reconstruction in recreateError
Move pending oauth1 request tokens from ram into the DB.
OAuth: rename token to key in pendingCredentials to reduce confusion
Encrypt account service configuration and OAuth secrets stored in the
database.

"Oauth" is renamed to "OAuth".  "Oauth" is kept as an alias for
backwards compatibility.

README.md contains a sample description of how to generate and use the
oauthSecretKey, which might be incorporated into the wiki
documentation page.
oauth-encryption code review items

Have `OAuthEncryption.open` throw "decryption unsuccessful" on any
error to avoid allowing an attacker to break the encryption key by
observing the result of sending manipulated ciphertexts.

Add oauth-encryption and the oauthSecretKey config options to the docs
page.

Update history.

More documentation on functions.

Use `OAuth.sealSecret(...)` instead of `{seal: ...}`.

Rename OAuth._openSecret(s) to OAuth.openSecret(s).

In the readme describing how to generate a key, just use Node instead
of going through the hassle of creating a Meteor application.

Have the `oauth` package weakly depend on `oauth-encryption` for when
it's being used without accounts.

Add tips on using oauth-encryption without accounts to the readme.
Add example for encrypting existing user tokens to the oauth-encryption readme.

Replace the `Meteor._insecureExceptions` flag with
`Meteor._printDecryptionFailure` to more closely match livedata's
`Meteor._printSentDDP` and `Meteor._printReceivedDDP`.  This also has
the advantage of not changing the behavior of the `open` function when
additional debugging is needed in development.
Missed an important site when bumping DDP version number. pre1->pre2

This should have been in 197552ae9b1c87393d50c3b59410a41185b77c1a
Change observe-sequence callbacks

We now call 'removedAt' and 'changedAt' with indices (instead
of 'removed' and 'changed'). While at it, fix a bug where
the 'movedTo' callback was firing with incorrect
indices.

commit f44d03d2c8bbfca32ae08fdabef35472c62042eb
Author: Avital Oliver <avital@thewe.net>
Date:   Tue Apr 15 14:54:29 2014 -0700

    A more complicated movedTo test that should catch a bug

commit 24f9ba3ffc708cf1af34e434ddf033c54d246614
Author: Avital Oliver <avital@thewe.net>
Date:   Tue Apr 15 14:05:44 2014 -0700

    Update tests and {{#each}} for new observe-sequence
Add support for block comments in Spacebars
@font-face added to css minifiers
Use unreleased version of css-stringify that fixes #2028
Fix Deps's broken _assign (harmless)

You can't do ({hasOwnProperty: 12345}).hasOwnProperty("hasOwnProperty") -- think about it.

Basically, `obj.hasOwnProperty(key)` is considered harmful.  `Object.prototype.hasOwnProperty.call(obj, key)` is fine.  We should standardize on `_.has` or something and do a pass through the codebase.

This is my code so my bad.
Don't use _.pick in observe-sequence

Trying to stick to a small set of _ methods for stand-alone Blaze
Improve HTTP.call doc list of methods.
Document that followRedirects defaults to true

Per https://github.com/mikeal/request#requestoptions-callback