- Relying on APPLICATION_ENV is simpler.

Otherwise Zend\Session\Config\SessionConfig::setStorageOption() throws an exception when it tries to call ini_set with session-specific settings. This would have happened at least when creating a \Zend\Session\Container.

Add timestamps to static image urls like is already done for js and css files so that images can be cached without risk of missing any updates.

- This allows embedding to work more consistently, even though the user experience is not the best.

- The LoggerAwareTrait already defines it.

If a user accidentally mistypes their login credentials, they are not returned to the page they were on after successfully logging in via ILS Authentication. There already exists a similar fix for when a non-logged-in user goes to MyResearch/Home (which initiates the login challenge page). This bug fix adds one for MyResearch/UserLogin, too, which is linked to in themes/bootstrap3/templates/header.phtml

    Note: Links to MyResearch/UserLogin can have parameters, e.g., UserLogin?method=ILS,
    which is why I perform a substring test here:

        if (0 === strpos($refererNorm, $mulNorm)) {

     instead of testing for equality:

        if ($refererNorm === $mulNorm) {

- Use cursorMark for fetching IDs in sitemap generator search mode (faster for large indexes).
- Simplify code to better separate retrieval mode-specific logic.
- Change default retrieval mode to "search" since "terms" may not behave as expected in some situations (e.g. when hidden filters are applied).

- Security: do not pass the user's existing password back into the template; instead, leave the password field blank and check credentials only when it is changed.
- Bug fix: when the user updates an active library card, update the user table as well as the library_cards table.
- Bug fix: when the active library card contains invalid credentials, allow the user to either log back in with good credentials or switch to a different card.

- We should not assume ils-none means no holdings; a use case exists where a user has no real-time ILS but still encodes holding information in MARC records.
- We should actually check whether getHolding returns data to determine whether holdings exist.
- TODO: consider introducing a local record driver cache if performance issues are encountered (but probably not necessary).

- Automatically creates and configures standard VuFind plugins
- Either uses an existing factory or creates a stub for building one

Signed-off-by: Stefan Weil <sw@weilnetz.de>

- Add mechanism to load links by AJAX based on DOI.
- Implement data provider using BrowZine API.