From edea5f3cd023f931fd64fead8f697fdd64bf5117 Mon Sep 17 00:00:00 2001
From: Dallon Feldner <dallonfdev@gmail.com>
Date: Tue, 30 Oct 2012 11:43:48 -0700
Subject: [PATCH] Updated history

---
 HISTORY.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/HISTORY.md b/HISTORY.md
index ae6ef89..6ef94af 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -7,6 +7,8 @@
  - Added `dpd.off(name, [fn])` function to remove a realtime handler
  - Added `dpd.socketReady(fn)` function to listen for the built-in `connect` event
  - Added `dpd.socket` property to provide direct access to socket.io.
+ - Fixed bug where username and password could be updated by an unauthenticated put.
+  - Usernames and passwords can be updated only by that user's session, a root session, or an internal request.
 
 ## 0.6.7