Changed the way auditKeys hook works, and added excludeKeys option to limiter
Rate limiter: Added arbitrary increments, meaningful ttl, and time formatting
Added req.user.logout to HTTP and socket, which uses the new user.logout socket listener on the client to automatically log it out
core wasn't handling ip normalization correctly, since Express was hijacking req.ip. Added working normalization as well as a setting to allow trusted proxies
Server-side logging out wasn't working correctly; a more robust fix
Crap removal
Reversed error semantics
Added authorization/request middleware differentiation for socket, so we can actually allow packages the ability to reject a socket connection as unauthorized
Bad socket emission
Client-side redirection and refreshing mechanism, from the server
Villiany package, for detecting and banning bad behavior
Villiany implementation for limiter