[Security] made session manager have some degree of IP validation for session keys and upgrades

Fixed session validation bug in upgrade script; fixed non-object reference in template_nodb

Added safety against re-defining constants in dbal

Update readme for imminent 1.1.3 release

Hopefully completed rewrite and localization of rollback backend and interface

Added a cron task to sessions.php that deletes old admin keys once a week

Added $no_wrapper parameter to die_semicritical, useful for some upcoming PageProcessor tweaks.

Localized some remaining login bits

Fixed bad style update during theme uninstall.

Upgraded to TinyMCE 3.0.3; made editor auto-init again but only on Safari

Fixed $db->die_json(), should now produce standards-compliant output.

Changed TinyMCE init to run only on demand. Highly experimental.

Added modal dialog support for page editor; added customizability for breadcrumbs (thanks to Manoj for idea)

Implemented password reset (albeit hackishly) into the new login API; added dummy window.console object to hopefully reduce errors when Firebug isn't around; fixed the longstanding ACL dismiss/close button bug; fixed a couple undefined variables in mailer; fixed PHP error on attempted opening of /dev/(u)random in rijndael.php; clarified documentation for PageProcessor::update_page(); fixed some logic problems in theme ACL code; disabled CAPTCHA debug

Implemented all security features on theme disabling and ACLs; added clean_key mode to login API to clean unused encryption keys