Add 'meteor list-sites' command
Return immediately if not logged in on 'meteor list-sites'
Split logoutOtherClients into two methods.

One method call gives you a new token, and another method call removes
all but the current token. Meteor.logoutOtherClients calls both these
methods, and calls the user's callback when the second has returned.
whitespace and use 'self' instead of 'this'
Add comments to logoutOtherClients methods
Oauth Pending Credentials - even cleaner reconstruction in recreateError
Move pending oauth1 request tokens from ram into the DB.
OAuth: rename token to key in pendingCredentials to reduce confusion
Encrypt account service configuration and OAuth secrets stored in the
database.

"Oauth" is renamed to "OAuth".  "Oauth" is kept as an alias for
backwards compatibility.

README.md contains a sample description of how to generate and use the
oauthSecretKey, which might be incorporated into the wiki
documentation page.
oauth-encryption code review items

Have `OAuthEncryption.open` throw "decryption unsuccessful" on any
error to avoid allowing an attacker to break the encryption key by
observing the result of sending manipulated ciphertexts.

Add oauth-encryption and the oauthSecretKey config options to the docs
page.

Update history.

More documentation on functions.

Use `OAuth.sealSecret(...)` instead of `{seal: ...}`.

Rename OAuth._openSecret(s) to OAuth.openSecret(s).

In the readme describing how to generate a key, just use Node instead
of going through the hassle of creating a Meteor application.

Have the `oauth` package weakly depend on `oauth-encryption` for when
it's being used without accounts.

Add tips on using oauth-encryption without accounts to the readme.
Add example for encrypting existing user tokens to the oauth-encryption readme.

Replace the `Meteor._insecureExceptions` flag with
`Meteor._printDecryptionFailure` to more closely match livedata's
`Meteor._printSentDDP` and `Meteor._printReceivedDDP`.  This also has
the advantage of not changing the behavior of the `open` function when
additional debugging is needed in development.
Add support for block comments in Spacebars
Fix Deps's broken _assign (harmless)

You can't do ({hasOwnProperty: 12345}).hasOwnProperty("hasOwnProperty") -- think about it.

Basically, `obj.hasOwnProperty(key)` is considered harmful.  `Object.prototype.hasOwnProperty.call(obj, key)` is fine.  We should standardize on `_.has` or something and do a pass through the codebase.

This is my code so my bad.
Don't use _.pick in observe-sequence

Trying to stick to a small set of _ methods for stand-alone Blaze
Improve HTTP.call doc list of methods.
Document that followRedirects defaults to true

Per https://github.com/mikeal/request#requestoptions-callback
Fix `UI.toHTML` on templates containing `{{#with}}`

Originally reported at
https://github.com/meteor/meteor/issues/2007#issuecomment-40530195
Properly clean up autoruns on `UI.toHTML`.

The prior commit didn't stop components of type
`Spacebars.With` correctly.
Merge remote-tracking branch 'origin/pr/2061' into devel

Conflicts:
	packages/spacebars-tests/template_tests.html
	packages/spacebars-tests/template_tests.js
Increase length of security-critical random tokens. Add `Random.secret`.