Add 'meteor list-sites' command
Return immediately if not logged in on 'meteor list-sites'
Split logoutOtherClients into two methods.

One method call gives you a new token, and another method call removes
all but the current token. Meteor.logoutOtherClients calls both these
methods, and calls the user's callback when the second has returned.
whitespace and use 'self' instead of 'this'
Add comments to logoutOtherClients methods
Do not ignore jquery-event extra parameters
Oauth Pending Credentials - even cleaner reconstruction in recreateError
Move pending oauth1 request tokens from ram into the DB.
OAuth: rename token to key in pendingCredentials to reduce confusion
Encrypt account service configuration and OAuth secrets stored in the
database.

"Oauth" is renamed to "OAuth".  "Oauth" is kept as an alias for
backwards compatibility.

README.md contains a sample description of how to generate and use the
oauthSecretKey, which might be incorporated into the wiki
documentation page.
Blaze: move all attribute updating to attrs.js
Don't depend on underscore in attrs.js
Minor (no-op) change
Add missing "var"
oauth-encryption code review items

Have `OAuthEncryption.open` throw "decryption unsuccessful" on any
error to avoid allowing an attacker to break the encryption key by
observing the result of sending manipulated ciphertexts.

Add oauth-encryption and the oauthSecretKey config options to the docs
page.

Update history.

More documentation on functions.

Use `OAuth.sealSecret(...)` instead of `{seal: ...}`.

Rename OAuth._openSecret(s) to OAuth.openSecret(s).

In the readme describing how to generate a key, just use Node instead
of going through the hassle of creating a Meteor application.

Have the `oauth` package weakly depend on `oauth-encryption` for when
it's being used without accounts.

Add tips on using oauth-encryption without accounts to the readme.
When initializing oplog tailing, only read 'ts'

This means we read less data (yay), but more importantly it means that
if the last entry contained custom EJSON types, we don't try to parse
them. This code gets called synchronously from the first
Meteor.Collection constructor, which can legitimately be before your
EJSON.addType call.

Fixes #2018.
Clone various parameter lists in livedata

Specifically:

 - On client, clone parameters to sub and methods (so that if they're
   modified outside before the method message is actually sent, before
   the sub params are used for de-duping, or before resending messages
   on reconnect, this doesn't affect what we do)
 - On server, ensure that method bodies mutating their arguments does
   not affect callers of Meteor.call (executing locally)

Fixes #2025.
Add example for encrypting existing user tokens to the oauth-encryption readme.

Replace the `Meteor._insecureExceptions` flag with
`Meteor._printDecryptionFailure` to more closely match livedata's
`Meteor._printSentDDP` and `Meteor._printReceivedDDP`.  This also has
the advantage of not changing the behavior of the `open` function when
additional debugging is needed in development.
Upgrade to node-mongodb-native 1.4.1

This improves the replset join event.
Re-poll all OplogObserveDrivers on mongo failover