implement package upgrades and better security for those who have signed up but not paid
Merge remote-tracking branch 'origin/master'