Issue #716496 by killtheliterate, rootwork: Make sure all core template files are in themeable group

Issue #246029 by zserno, rjgoldsborough, blisteringherb, rfay, Alan Evans, kgoel | izmeez: Added Use a variable for the timeout/expiration of user password reset links.

Issue #1615312 by dsdeiz, David_Rothstein: Make sure all D7 to D7 updates are listed in the updates-7.x-extra group

Issue #1552400 by mjonesdinero, SumeetSingh: Fix documentation for user_is_blocked, which was misleading.

Issue #1600892 by tim.plunkett, sun: Fixed Tests use magic numbers 1 and 2 instead of user role constants.

Issue #1348758 by drewish, tim.plunkett: Fixed Add an index to {users}.picture so user_file_delete() isn't insanely slow.

Issue #687586 by oriol_e9g, Mike Wacker, agentrickard: Fixed Remove access check from user_register_submit().

Issue #1488414 by nmudgal, chertzog: Add comment to user_schema to explain why table name is plural in spite of our usual standards

Issue #278425 by andypost, droplet, OnkelTem, chx, c960657, drewish, kotnik, realityloop: Change notice for: Using basename() is not locale safe.

Issue #1205138 by pwolanin, Dave Reid: Do not blow away non-MD5 password hashes in user_update_7000().

Issue #1123092 by michaellenahan: Fixed user-profile.tpl.php doc has confusing/misleading first paragraph.

- Patch #999040 by Niklas Fiekas: corrected alternative control structure syntax in theme templates.

Issue #1234834 by catch: Fixed user_update_7006() causes fatal errors when trying to fill 'module' column of permissions table on disabled modules.

Issue #717834 by David_Rothstein, clemens.tolboom, catch: Fixed The dependencies declared in core's hook_update_dependencies() implementations aren't actually correct.

Issue #1203766 by sun, lyricnz: Fixed With large number of permissions /admin/people/permissions becomes unusable.

Issue #1192178 by pillarsdotnet: Changed The user_module_invoke() function lacks documentation of parameters.