storage

• Updates Storer interface to include the now existing concrete implementations of RevokeRefreshToken and RevokeAccessToken
• Adds an edge case test for a single hostname in hostnames

• Opened the user model up to accept passwords via JSON/XML payloads.

Ensure that on all API routes, if using the model directly, to either cast attributes to a response struct that does
not contain a password attribute or clear out the password field before sending the response.

Bugfixes:

• Users
  • Fixes an issue in GetUser() where error checking err != mgo.ErrNotFound should have been err == mgo.ErrNotFound
  • Fixes error handling being over generous with multi-returns of errors.withstack(errors.withstack(...))

Adds support for fosite v0.9.0

Fixes bug related to findSessionBySignature where mgo requires a MongoRequest struct that has been malloc'd

Make all marshalling conform to JS/JSON camelCase convention

General pre-release!