Add debug information for user.login
Remove message prefix as debug will print it
Merge pull request #164 from strongloop/feature/fix-accesstoken-id

Remove the generated flag for access token id
Describe `access_token` param of `User.logout`

Add an explicit note that clients are not supposed to send the
`access_token` parameter, since it is extracted from request
headers.
Add `include=user` param to `User.login`

Allow LB clients to get details of the currently logged-in user
as part of the login response.

Improve method's `description` to mention this new option.
Merge pull request #154 from strongloop/feature/debug-login-error

Add debug information for user.login
Merge pull request #163 from strongloop/feature/include-user-in-login-result

Include user in login result
v1.6.1
Merge branch 'release/1.6.1' into production
Merge tag 'v1.6.1'

v1.6.1
Make sure the configured ACL submodel is used
Merge pull request #166 from strongloop/feature/acl-subclass

Make sure the configured ACL submodel is used
Fix incorrect usage of `app` in app.test.js

The `beforeEach` hook was using a local `var app`, the test was
accessing global `app` created by `test/support.js`.
Make app.models unique per app instance

Remove a source of confusion in unit-tests.
Merge pull request #168 from strongloop/feature/new-model-registry-per-app

Make app.models unique per app instance
Add app.isAuthEnabled.

The flag is set by `app.enableAuth` and can be used to detect
whether the access control is enabled.
Merge pull request #170 from strongloop/feature/add-app-isAuthEnabled

Add app.isAuthEnabled.
Use hex encoding for application ids/keys

base64 encoded ids/keys are not friendly for urls