use a Cipher instance per invocation (threadsafe)
Merge pull request #689 from sonatype/threadsafe-rid-obfuscator

use a Cipher instance per invocation (threadsafe)
[NX-460] Add usertype (=normal|admin|anonymous) parameter to outreach content.
Merge pull request #691 from sonatype/NX-460-outreach-usertype

REVIEW: [NX-460] Add usertype parameter to outreach
NEXUS-6771: if an error occurs during Jetty startup, shutdown the container (but allow this behaviour to be disabled by setting 'org.sonatype.nexus.bootstrap.ShutdownHelper.ignore' system property to true)
Workaround rare exception involving mvn: URLs when running embedded legacy tests
[NEXUS-6786] Allow exclusion of specific User Agents from browser detection
Ignore org.ops4j.pax.url.mvn false-postive when preparing bundles; also add quick check for already prepared dependencies to save checking them again
Log activation of individual bundles at INFO level; this gives better progress feedback while booting at the cost of extra logging
[NEXUS-6786] Rename property and trim whitespace
Disable Karaf's blocking startup lock in favour of the old nexus-bootstrap lock; this will terminate the process when it detects another instance is already running instead of just blocking. Note that this is a quick workaround, we should consider providing our own Karaf startup lock implementation which we can configure using the 'karaf.lock.class' property.
Merge pull request #692 from sonatype/NEXUS-6771-stop-on-error

NEXUS-6771: if an error occurs during Jetty startup, shutdown the container
Drop pluginName, use "${project.groupId}.${project.artifactId}"
Merge pull request #694 from sonatype/NEXUS-6786-browserdetector-exclude-NX3

[NEXUS-6786] Allow exclusion of specific User Agents from browser detection (NX3)
Update siesta to 2.0.2
release: 3.0.0-b2014082901
update to next version: 3.0.0-SNAPSHOT
update to latest font-awesome 4.2.0
NEXUS-6763: Per-Request checksum policy override chatty

As the condition (or the override, as you look at it) was at
wrong place. The code did not expect to start with policy
IGNORE which became possible with the per-request overrides

Ported from
1b28867af208b48137a3cee081c5f9bd3bcfda62
normalize use of sign-in/out terminology