require user to be admin to listen to allUsers notification
changed the privacyOptions to be a whitelist instead of a blacklist to avoid accidental leak of information.
export Notifications collection out of package
Merge pull request #377 from niklasdstrom/publication-validation

Publication validation
security fix
fix #401
Merge pull request #420 from GoodEveningMiss/slugify-collisions

fix #401 profile url collisions
Merge remote-tracking branch 'upstream/master' into master-upstream