Issue #2455047 by David_Rothstein: Various one-time-login and validation links don't work with Drupal 6.35 and Drupal 7.35

Added two commits to a new 7.x-1.4 tag for a security that precede some development commits

Joel Walters authored Jul 04, 2014 and Steve Cowie committed Jul 04, 2014

change hook that removes authorized role from users with temporary role so that it happens in all page loads

#1213466 by gapple: Content Access compatibility contrib module README file, bump core version in .info file.

Issue #1112670 : The LoginToboggan rule module now lists its event in User eventgroup. patch provided by mikewink

#1273830 by hunmonk: Document non-authenticated role disables auto-permission from authenticated user.

#1213466 by gapple: Content Access compatibility contrib module. implements a hook which specifies to Content Access that the Non-authenticated role, if defined, requires special treatment. i did not test the module at all, the contrib folder is the wild west, so hopefully it works. ;)

#1172652 by hunmonk, tim.plunkett: Show unified login on Access Denied. this also abstracts the creation of the unified login form into its own function, and adds a helper function to determine which login form to build based on the LT settings.

#409338 by sbrattla, hunmonk: disable core 'Require e-mail verification when a visitor creates an account' setting.