Summary of changes: b519729... auth token middleware is an upgrade bottleneck (*) 312b182... Require authz to update user's tenant (CVE-2012-3542) (*) (*) This commit already existed in another branch; no separate mail sent