CHANGELOG.rdoc in devise-2.1.0.rc vs CHANGELOG.rdoc in devise-2.1.0.rc2

@@ -1,14 +1,35 @@
-== 2.1.0.dev
+== trunk (2.1.0.rc2)
 
 * enhancements
+  * Devise model generator now works with engines
+  * Devise encryptable was moved to its new gem (http://github.com/plataformatec/devise-encryptable)
+
+* deprecations
+  * Deprecations warnings added on Devise 2.0 are now removed with their features
+  * use_salt_as_remember_token and apply_schema does not have any effect since 2.0 and are now deprecated
+  * valid_for_authentication? must now return a boolean
+
+* bug fix
+  * Ensure the failure app still respects config.relative_url_root
+  * `/users/sign_in` doesn't choke on protected attributes used to select sign in scope (by @Paymium)
+  * `failed_attempts` is set to zero after any sign in (including via reset password) (by @rodrigoflores)
+  * Added token expiration on timeout (by @antiarchitect)
+  * Do not accidentally mark `_prefixes` as private
+  * Better support for custom strategies on test helpers (by @mattconnolly)
+  * Return `head :no_content` in SessionsController now that most JS libraries handle it (by @julianvargasalvarez)
+
+== 2.1.0.rc
+
+* enhancements
   * Add check_fields! method on Devise::Models to check if the model includes the fields that Devise uses
   * Add `skip_reconfirmation!` to skip reconfirmation
 
 * bug fix
   * Ensure after sign in hook is not called without a resource
   * Fix a term: now on Omniauth related flash messages, we say that we're authenticating from an omniauth provider instead of authorizing
+  * Fixed redirect when authenticated mounted apps (by @hakanensari)
 
 * deprecation
   * All devise modules should have a required_fields(klass) module method to help gathering missing attributes
 
 == 2.0.4
@@ -70,9 +91,10 @@
   * Usage of recoverable without reset_password_sent_at was removed
   * Usage of Devise.case_insensitive_keys equals to false was removed
   * Move devise/shared/_links.erb to devise/_links.erb
   * Deprecated support of nested devise_for blocks
   * Deprecated support to devise.registrations.reasons and devise.registrations.inactive_signed_up in favor of devise.registrations.signed_up_but_*
+  * Protected method render_with_scope was removed.
 
 == 1.5.3
 
 * bug fix
   * Ensure delegator converts scope to symbol (by @dmitriy-kiriyenko)