Changes for the week ending 2015-1-25:
- XSS fix for category code and subscription frequency and start dates in the cart.
- WorldPay support for XML username and throwing a wrong credentials error on HTTP 401 status.
- Added admin password reset rate limiting.