shib_auth 6.x-4.0

Bug fixes since -rc6

• Support GET parameters throughout redirects
• Don't assign roles while linking
• Don't overwrite custom emails on linking
• Handle 'Cancel' on consent update
• Fix improper use of link hook
• #1253174: Logout URL relative to site, not server
• Filter XSS on every possible user-supplied input
• Fix redirect issues
• #1320902: Error: 'E-mail address is already used'
• #1279186: Roles not always assigned (Role assignment with memcached)

Improvements / New features since -rc6

• Save only assigned roles to a rule
• Code cleanups, code standardisation, cosmetics
• Rewritten rule list to use themetable
• #1308502: Undefined index on devel user switch (PHP notice)
• Redirect users away from user/login
• Improved internal config handling
• #1302312: Display shib_auth variables on debug Display module config on debug
• Handle disappearing mail attribute (when custom mail is disabled and the attribute can not be fetched)