* Fixed: source parameters specified when posting on the web (for example, as part of a link from a "Tweet This"/"Share This On Twitter" button) were being ignored.

* Fixed: /friendship/exists.json was returning "true" and "false" as strings, not boolean literals, as they should in a proper JSON response.

* Fixed: some methods were defaulting to JSON when no format was specified. A format must be specified for all API calls.

* Security: it was possible to discover the currently logged-in user via an unauthenticated call to the /statuses/user_timeline method. This is a potential privacy concern, and was disabled.

* Fixed: Atom feeds for timelines incorrectly reported all user profile pictures as image/png.

* Fixed: Requests with &id= and no value returned a user rather than an error. Now an error is returned.

* Fixed: the /statuses/replies method did not support the count parameter to control the number of statuses returned. Support for the count parameter was added.