removes HEAD method for profile-edit
adds validation to profile-edit route
adds honeypot goodness
ensures that request.query.page is a positive round integer
add tests and validation for static page names
do not star or unstar invalid package names
fixes double reply issue
remove one-off json context responders
update bonbon to intercept all ?json requests, remove entire user object, and reply with the view context object
restrict `json` query parameter to dev env and logged-in npm employees
validates email for enterprise contact form
update Joi for fun and profit
sanitize enterprise signup params
don’t show all the copy when redirecting to form with bad input
test for human errors in enterprise contact form submissions
separate public routes from those that require authentication
remove murmurhash from files that don’t use it
make login form keyboard tabbing friendly
don’t delete user from context
use a session password that differs from some other env