Comment 14 for bug 1362615

Here are the commits related to this bug:

commit 9a8d01ff1ac54bb9c3c737bdb9ff5c0a688f3013
Author: Przemyslaw Kaminski <email address hidden>
Date: Mon Oct 6 16:00:24 2014 +0200

    Add cookie-based authentication along with X-Auth-Token

    - added jquery.cookie as Bower dependency
    - fixed keystone.py middleware to process the cookie and inject X-Auth-Token
      into the request, X-Auth-Token still has priority though
    - fixed 401 response format to return iterable (list)
    - added test_auth_token for testing both authentication methods

    Change-Id: I01239c93b8f0d5da95424d44c96f6fb60ab378fd
    Implements: blueprint access-control-master-node-improvments

These 2 are yet unmerged to master:

https://review.openstack.org/#/c/127219/

commit 207580c58842166ef516b36e5917be251b7472ec
Author: Przemyslaw Kaminski <email address hidden>
Date: Thu Oct 9 14:28:46 2014 +0200

    Bring back X-Auth-Token by default

    It seems that requests are made to other places than API so this
    token is still required there (Health check for example with OSTF).

    Change-Id: I2f0e47a57b360abd04f2ca21fc013ccd34d84eec
    Closes-Bug: #1379000

https://review.openstack.org/127223

commit d721deb0268942692402a32a8b81f5e8dff9c7e2
Author: Przemyslaw Kaminski <email address hidden>
Date: Thu Oct 9 14:45:23 2014 +0200

    Remove capacity/csv from public URLs

    With the new cookie-based authentication this download link does
    not need anymore to be publicly accessible (the X-Auth-Token header
    was the reason to first make the link public).

    Change-Id: If72bb8fe764810c565fc08f960db3e19ddaf4fb9
    Closes-Bug: #1362615
    Related-Bug: #1379000