add script/changelog

see https://github.com/jch/release-scripts
add a changelog
bump version to 1.4.0
add release scripts
document how to release
Merge pull request #60 from github/release-1.4.0

Release 1.4.0
Release 1.4.0
Merge remote-tracking branch 'origin/master' into default-membership-validator