CHANGELOG.md in opro-0.3.0.pre1 vs CHANGELOG.md in opro-0.3.0.pre2

@@ -2,9 +2,11 @@
 
 - Properly set attr_accessible for those apps that are requiring all attributes to be whitelisted.
 - Allow access_token to be passed in header `curl -H "Authorization: token iAmAOaUthToken" http://localhost:3000`
 - Default `config.password_exchange_enabled' to true
 - Allow multiple `find_user_for_auth` calls in setup to allow custom finders for facebook, etc.
+- You can now rate limit incoming client applications.
+- Allow clients to mitigate security threat (http://homakov.blogspot.com/2012/07/saferweb-most-common-oauth2.html)
 
 ## 0.2.0
 
 - Allow password exchange for access_token using `config.password_exchange_enabled = true`
 
\ No newline at end of file