- Patch #1591604 by underq, chrisdolby, Albert Volkman, pfrenssen: replace drupal_access_denied() with throw AccessDeniedHttpException.

- Patch #1587850 by pfrenssen, chrisdolby: replace drupal_not_found() with throw NotFoundHttpException.

Issue #1315992 by xjm: Remove path designations from menu callback docs to conform with current 8.x standards

Issue #1227942 by Rob Loach, cweagans, tstoeckler, xjm: Rename format_username() now that it's in user.module.

Nate Lampton authored Oct 30, 2011 and catch committed Nov 01, 2011

Issue #22336 by quicksketch, scor, boombatower, and rfay. Move all core Drupal files under a core subdirectory.

#679890 follow-up by Bojhan, aspilicious, and agentrickard: Remove more extraneous 'Please' in the interface.

#192056 by effulgentsia, Dave Cohen, andypost, hswong3i, geodaniel, pwolanin, and dahacouk: Ensure user's raw login name is never output directly.

- Patch #589126 by mfb: fixed bug with user module using a flood window of 6 hours, but flood events more than 1 hour old being deleted by cron. Improved API documentation, and added tests.

- Patch #601250 by Dave Reid, VeryMisunderstood: allow anonymous users to use personal contact forms.

- Patch #601016 by Dave Reid: remove contact_site_page() and contact_personal_page() and use the forms directly.

- Patch #572618 by effulgentsia, pwolanin, sun: all theme functions should take a single argument. Code clean-up and performance improvement. Woot.

- Patch #597784 by Dave Reid: rename 'administer site-wide contact form' to 'administer contact forms'.

- Patch #578520 by sun | c960657, mfb, Dries, catch, mattyoung: make  in url() only accept an array. Another nice API clean-up!

before a form builder function, to facilitate common form elements. Clean-up
from form_builder changes from CTools patch. Has nice side-benefit of making
all form functions' signatures consistent.

- Patch #282858 by Dave Reid, Ian Ward: nicer message for the contact form when it has not yet been configured.