gustafn
committed
on 20 May 16
- bump version number to 1.3d14
- improve security of return_urls