(Security page didn’t have a localisable file name. It does now.)

(File names in headings were being erroneously capitalised.)

  * Authorisation token is now passed in the "Authorization" header for all calls
  * The installer secret is stored in its own installer-secret.json file under the data/configuration directory (~/indie)

(To reflect that the owner settings object in the Site Service’s create/POST call only contains the owner’s secret sign up code.)

  * API
  * Indie Site Deployment requirements