2.14.0

 * Replace deprecated hooks with Operation hooks (Miroslav Bajtoš)

 * test: don't warn about running deprecated paths (Miroslav Bajtoš)

 * karma conf: prevent timeouts on Travis CI (Miroslav Bajtoš)

 * Pass options from User.login to createAccessToken (Raymond Feng)

 * Config option to disable legacy explorer routes Setting legacyExplorer to false in the loopback config will disable the routes /routes and /models made available in loopback.rest. The deprecate module has been added to the project with a reference added for the legacyExplorer option as it is no longer required by loopback-explorer. Tests added to validate functionality of disabled and enabled legacy explorer routes. (Ron Edgecomb)

 * test: setup GUID for all models tracking changes (Miroslav Bajtoš)

 * Change tracking requires a string id set to GUID (Miroslav Bajtoš)

2.13.0

 * Add a workaround to avoid conflicts with NewRelic (Raymond Feng)

 * Fix "User.confirm" to always call afterRemote hook (Pradnya Baviskar)

 * Skip hashing password if it's already hashed (Raymond Feng)

 * travis.yml: drop 0.11, add 0.12 and iojs (Miroslav Bajtoš)

 * Add docs for settings per strongloop#1069 (crandmck)

 * Fix change detection & tracking (Miroslav Bajtoš)

 * Minor doc fix (Ritchie Martori)

 * Upgrade jscs to ~1.11 via grunt-jscs ^1.5 (Miroslav Bajtoš)

 * Remove redundant dev-dep serve-favicon (Miroslav Bajtoš)

 * Fix test broken by recent juggler changes (Miroslav Bajtoš)

 * Fix coding style issue (Raymond Feng)

 * Remove trailing spaces (Raymond Feng)

 * Fix for issue 1099. (zane)

 * Fix API docs per strongloop#1041 (crandmck)

 * Fix API docs to add proper callback doc per strongloop#1041 (crandmck)

 * Fix strongloop#1080 - domain memory leak. (Samuel Reed)

 * Document user settings (Ritchie Martori)

 * Add wiki references to readme (Simon Ho)

2.12.1

 * Map not found to 404 for hasOne (Raymond Feng)

2.12.0

 * Fix the test case (Raymond Feng)

 * Enable remoting for hasOne relations (Raymond Feng)

 * README: add Gitter badge (Miroslav Bajtoš)

2.11.0

 * Document options for persistedmodel.save() (Rand McKinney)

 * Add test case to demonstrate url-encoded http path (Pradnya Baviskar)

 * Fix JSdocs per strongloop#888 (crandmck)

 * Add test case for loopback issue strongloop#698 (Pradnya Baviskar)

 * Remove usages of deprecated `req.param()` (Miroslav Bajtoš)

 * Add error code property to known error responses. (Ron Edgecomb)

 * test: use 127.0.0.1 instead of localhost (Ryan Graham)

 * Extend AccessToken to parse Basic auth headers (Ryan Graham)

 * tests: fix Bearer token test (Ryan Graham)

 * don't send queries to the DB when no changes are detected (bitmage)

2.10.2

 * Make sure EXECUTE access type matches READ or WRITE (Raymond Feng)

2.10.1

 * Optimize the creation of handlers for rest (Raymond Feng)

 * Add a link to gitter chat (Raymond Feng)

 * Added context middleware (Rand McKinney)

 * Use User.remoteMethod instead of loopbacks method This is needed for loopback-connector-remote authorization. Addresses strongloop#622. (Berkeley Martinez)

2.10.0

 * Revert the peer dep change to avoid npm complaints (Raymond Feng)

 * Update strong-remoting dep (Raymond Feng)

 * Allow accessType per remote method (Raymond Feng)

 * API and REST tests added to ensure complete and valid credentials are supplied for verified error message to be returned  - tests added as suggested and fail under previous version of User model  - strongloop#931 (Ron Edgecomb)

 * Require valid login credentials before verified email check.  - strongloop#931. (Ron Edgecomb)

2.9.0

 * Update juggler dep (Raymond Feng)

 * Fix Geo test cases (Raymond Feng)

 * Allow User.hashPassword/validatePassword to be overridden (Raymond Feng)

2.8.8

 * Fix context middleware to preserve domains (Pham Anh Tuan)

 * Additional password reset unit tests for API and REST  - strongloop#944 (Ron Edgecomb)

 * Small formatting update to have consistency with identical logic in other areas.   - strongloop#944 (Ron Edgecomb)

 * Simplify the API test for invalidCredentials (removed create), move above REST calls for better grouping of tests   - strongloop#944 (Ron Edgecomb)

 * Force request to send body as string, this ensures headers aren't automatically set to application/json  - strongloop#944 (Ron Edgecomb)

 * Ensure error checking logic is in place for all REST calls, expand formatting for consistency with existing instances.  - strongloop#944 (Ron Edgecomb)

 * Correct invalidCredentials so that it differs from validCredentialsEmailVerified, unit test now passes as desired.  - strongloop#944 (Ron Edgecomb)

 * Update to demonstrate unit test is actually failing due to incorrect values of invalidCredentials  - strongloop#944 (Ron Edgecomb)

 * fix jscs warning (Clark Wang)

 * fix nestRemoting is nesting hooks from other relations (Clark Wang)