* Security (OAuth): Fixed a bug where the application authorization form did not require the POST request come from the same domain.

* Feature (OAuth): Added the ability to use non-http callback URLs for iPhone development.

* Fixed (OAuth): Improved error messaging on OAuth protocol failures.

* Fixed (OAuth): Changed access token generation to prevent truncation problems reports via feedback.