{"push_id":573773426,"size":1,"distinct_size":1,"ref":"refs/heads/feature/recoverable_autologin_option","head":"f0992e4a96352dbb2dfec731f46a51f99a013b29","before":"79a1fc17f096670c714b929ee9e5e7b5713aa6e7","commits":[{"sha":"f0992e4a96352dbb2dfec731f46a51f99a013b29","author":{"email":"8d0157d3ea1a8a75372f50eb95b39b3f28aa1b26@tinfoilsecurity.com","name":"Michael Borohovski"},"message":"Added an option to not automatically sign in a user after a password reset. This is useful for cases where additional strategies might be needed (such as two-factor authentication, e.g.), or generally if it is considered a security risk to automatically log in a user after a password is reset.","distinct":true,"url":"https://api.github.com/repos/borski/devise/commits/f0992e4a96352dbb2dfec731f46a51f99a013b29"}]}