* Fixed: Calls to /friendships/exists.json were returning incorrect results.

* Feature: The /users/show call now accepts the parameters user_id and screen_name to allow disambiguation of numeric screen names.

* Security (OAuth): Misconfigured applications could use insecure PLAINTEXT signatures. This has now been explicitly disallowed.

* Fixed (OAuth): Changed OAuth tokens to work correctly during database replication delays.

* Feature (OAuth): Removed the approval process for new applications. New applications will be allowed by default and we will review and revoke as needed.