* Fixed: The new /user/show calls with user_id and screen_name parameters were incorrectly returning the wrong data due to a caching bug.

* Feature (OAuth): Added the ability to regenerate the client key and secret in the event the secret gets leaked.

* Feature (OAuth): Added support for callback urls with query strings.

* Fixed (OAuth): The approval page incorrectly said all application needed update access. Now this is correctly displayed per application.

* Fixed (OAuth): The oauth_callback parameter is now retained if the user choses to sign in as a different user.