Rough draft of History.md additions. Covered all changes through ab59ae2.

Includes some XXX notes (some of which are about History.md itself, some of
which are suggestions for things to make sure to address before the next
release).

History.md

@@ -1,23 +1,59 @@
 ## vNEXT
 
-* Minimongo supports simple fields projections (but still no `$elemMatch` and
-  `$` operators support in projections).
+(XXX format section headers in a more standard way)
 
-* `restrictCreationByEmail` option in `Accounts.config` to restrict new users to
-  emails of specific domain (eg. only users with @meteor.com emails).
+SECURITY
+
+* Add `browser-policy` package for configuring and sending Content Security
+  Policy and X-Frame-Options HTTP headers.
+
+* Use cryptographically strong pseudorandom number generators when available.
+
+MINIMONGO
 
 * Pass an index and the cursor itself to the callbacks in `cursor.forEach` and
-  `cursor.map`, just like the corresponding `Array` methods. #63
+  `cursor.map`, just like the corresponding `Array` methods.  #63
 
-* Better error when passing a string to {{#each}}. #722
+* The `fields` option to the collection methods `find` and `findOne` now works
+  on the client as well.  (Operators such as `$elemMatch` and `$` are not yet
+  supported in `fields` projections.) #1287
 
-* Write dates to Mongo as ISODate rather than Integer; existing data can be
-  converted by passing it through `new Date()`. #1228
+* Support `c.find(query, {limit: N}).count()` on the client.  #654
+
+* Fix various bugs with using Mongo ObjectIds. (XXX bad description! this is
+  3cfeed and 008847)
+
+* Improve behavior of `$ne`, $nin`, and `$not` selectors with objects containing
+  arrays.  #1451
+
+DDP
+
+* Fix infinite loop if a client disconnects while a long yielding method is
+  running.
+
+* Unfinished code to support DDP session resumption has been removed. Meteor
+  servers now stop processing messages from clients and reclaim memory
+  associated with them as soon as they are disconnected instead of a few minutes
+  later.
+
+ACCOUNTS
+
+* `restrictCreationByEmail` option in `Accounts.config` to restrict new users to
+  emails of specific domain (eg. only users with @meteor.com emails).  #1332
+  XXX glasser agrees with Avi's concern that this option name does not suggest "domain".
+
+* Write dates generated by Meteor Accounts to Mongo as Date instead of number;
+  existing data can be converted by passing it through `new Date()`. #1228
 
 * Login token deletion: Expire login tokens periodically. Add
   Meteor._logoutAllOthers() for logging out other connections logged in as the
   current user. Log out and close connections for deleted users and tokens.
 
+* Support OAuth1 services that require request token secrets as well as
+  authentication token secrets.  #1253
+
+TOOLS
+
 * The pre-0.6.5 `Package.register_extension` API has been removed. Use
   `Package._transitional_registerBuildPlugin` instead, which was introduced in
   0.6.5. (A bug prevented the 0.6.5 reimplementation of `register_extension`
@@ -28,15 +64,46 @@
   behind a proxy. Use the standard `http_proxy` environment variable to
   specify your proxy endpoint.  #429, #689, #1338
 
+* Install NPM modules with `--force` to avoid corrupted local caches.
+
+* Rebuild NPM modules in packages when upgrading to a version of Meteor that
+  uses a different version of Node.
+
 * Build Linux binaries on an older Linux machine. Meteor now supports
   running on Linux machines with glibc 2.9 or newer (Ubuntu 10.04+, RHEL
-  and CentOS 6+, Fedora 10+, Debian 6+).
+  and CentOS 6+, Fedora 10+, Debian 6+). Improve error message when running
+  on Linux with unsupported glibc, and include Mongo stderr if it fails
+  to start.
 
-* Support OAuth1 services that require request token secrets as well as
-  authentication token secrets.  #1253
+* Disable the Mongo http interface. This lets you run meteor on two ports
+  differing by 1000 at the same time.
 
-* Add `browser-policy` package for configuring and sending Content Security
-  Policy and X-Frame-Options HTTP headers.
+MISC
+
+* Check that the argument to `EJSON.parse` is a string.  #1401
+
+* Better error from functions that use `Meteor._wrapAsync` (eg collection write
+  methods and `HTTP` methods) and in DDP server message processing.  #1387
+
+* XXX: Does appconfig branch have any visible effects that need to be here?
+
+* Support `appcache` on Chrome for iOS.
+
+* Support literate CoffeeScript files with the extension `.coffee.md` (in
+  addition to the already-supported `.litcoffee` extension). #1407
+
+* Make `madewith` package work again (broken in 0.6.5).  #1448
+
+* Better error when passing a string to {{#each}}. #722
+
+* Upgraded dependencies:
+  * Node from 0.8.24 to 0.10.19
+  * MongoDB from 2.4.4 to 2.4.6
+  * http-proxy from 0.10.1 to a pre-release of 1.0.0
+  * stylus from 0.30.1 to 0.37.0
+  * nib from 0.8.2 to 1.0.0  #1121 #1315
+  * XXX: we should try to do more upgrades in this release if possible (in
+    conjunction with the Node upgrade)
 
 
 ## v0.6.5.1