* Added providers to compute and validate the userdata string for authentication cookies
* Added UserDataProvider based on the date when the password was changed last: this means that changing the password invalidates all extant authentication cookies
* Added a service that allows configuring the lifespan of auth cookies, rather than always using a constant. The default implementation returns the same constant.
* Added setting to control the life span of authentication cookies
* Added setting to control the behaviour on changing password: logout every client, or none.
Added code to prevent users that were authenticated with "old" cookies to be suddenly logged out when deploying this
* Removed ISecurityService implementation from Orchard.Users.
Changed FormsAuthenticationService and DefaultSecurityService so that property injection configured in sites.config still works the same as before, and takes priority over ISecurityService implementations.
Changed serialization of UserData dictionary to use Newtonsoft.Json.
Added check to upgrade the authentication cookie whenever an "old" one is received.
* On cookie upgrade we do not give a fresh new cookie, but rather we keep the same expiration
Updates to handling of MasterContentItem (as they are in 1.10.x)
Synchronization of CultureNeutral Fields and Parts (based on Cloning)
Support for multi-language Blogs (in its own feature in the Blogs module)
Support for multi-language Taxonomies (in its own feature in the Taxonomies module)
Matteo Piovanelli