1.  ApplicationOAuthProvider.ValidateClientRedirectUri handles virtual directories now.
2.  Many resharper cleanups
3.  Some other code refactorings
4.  require.js configuration now done in require.configuration.js
5.  security.js takes base url of site into account