* Fixed (REST): Basic authentication now works with passwords containing a colon. (issue 496)

* Fixed (REST): Error message during downtime now matches documented response. (issue 300)

* Deprecated (REST): Support for the oauth_callback parameter has been removed due to security vulnerability. (discussion)

* Fixed (OAuth): OAuth images are properly served from through HTTPS. (issue 476)