upgrade.json.php again to mark the system as installed. Improved the alt
text for the images. Added an error callback for the upgrading so that if
the json script dies the spinner stops spinning.

whitespace.

form, and made the set_error method public for the same reason. Removed
a debug line.

at.

function so it can set errors.

and stores data from the user database across sessions (saving a db lookup)

interface and pluggable element types at the moment, though it needs some
cleanup yet.

auth_internal plugin.

lookup on the application database.

and then persist for the user even if they log out (note: session != login
session!).

This means that bots crawling the pages won't get sessions, which is a good
thing.

Made the authentication logic more solid too. The transient login page is
now implemented to a basic level.

function which walks the theme inheritance tree to avoid 404s

support to the default exception handler for passing its backtrace through
to be displayed, and also passing the correct file/line numbers, which
makes them far easier to track down.

script name when logging if the script is actually in the docroot.

to get the sanity checks done as soon as possible.

Include the auth page, but only after we know what theme we are supposed to
use, which allows drawing of correct login boxes.

later or someone else can look while I'm away