Allow the default configuration path to be set by code.
Use Gdn::Config()->DefaultPath() instead of the hard-coded config.php in the SetupController and StatisticsController.
Send an unauthorized response instead of a redirect when making api calls against private communities.
Use redirectUrl() instead of Redirect() for sso redirects.
Throw a Gdn_Session_End event.
Return a blank url for RegisterUrl() and SignInUrl() when those options aren’t allowed given sso setups.
Add http_build_url().
Set the content type for private site api calls.
Fire an installed event for plugins to hook into.
Allow the controller method to be overridden by a controller’s initialize method.
Log plugin enable/disable.
Don’t validate the transient key on the addons pages unless an addon is being manipulated.
Add the plugin name to the plugin event contexts.
Log application manager events.
Conflicts:
	library/core/class.applicationmanager.php
Log theme manager events.
Rename the signout event to session_end.
Conflicts:
	library/core/class.session.php
Add Logger::logAccess() to log access to sensitive resources.
Log access to settings and moderation.
Conflicts:
	library/core/class.controller.php
Use Gdn_Session->CheckPermission() instead of Gdn_Controller->Permission() for /log/count.
Short circuit Gdn_Form->AuthenticatePostBack() to avoid bad csrf events.