django/django — pull request #134 by bouchardsyl (2012-06-08 10:03:04+00:00)
Title: Fixed #17869 - security improvement to RemoteUserMiddleware

- (On behalf of Paul McMillan) this is a minor security fix so it should be backported to 1.4

Fixed #17869
- RemoteUserMiddleware forces logout when REMOTE_USER header disappears during a same browser session.
- Added a test, and documentation for the 1.4.1 release.