- The ``RemoteUserAuthenticationPolicy ``, ``AuthTktAuthenticationPolicy``,

  and ``SessionAuthenticationPolicy`` constructors now accept an additional
  keyword argument named ``debug``.  By default, this keyword argument is
  ``False``.  When it is ``True``, debug information will be sent to the
  Pyramid debug logger (usually on stderr) when the ``authenticated_userid``
  or ``effective_principals`` method is called on any of these policies.  The
  output produced can be useful when trying to diagnose
  authentication-related problems.

1 files changed, 2 insertions, 3 deletions

diff --git a/TODO.txt b/TODO.txt
index 130d7b1fc..160e02d47 100644
--- a/TODO.txt
+++ b/TODO.txt
@@ -14,12 +14,11 @@ Should-Have
 Nice-to-Have
 ------------
 
+- _fix_registry should dictify the registry being fixed.
+
 - Make "localizer" a property of request (instead of requiring
   "get_localizer(request)"?
 
-- Debugging setting for detecting why authenticated_userid(request) might
-  return None.
-
 - Deprecate pyramid.security.view_execution_permitted (it only works for
   traversal).