- rename settings' ELASTICSEARCH_URL to HOOVER_ELASTICSEARCH_URL
- upgrade to Django 1.10
- "External" loader that fetches documents from a URL
- set no-cache and no-referral response headers
- TOTP login -
hoover.contrib.twofactor - rate limiting -
hoover.contrib.ratelimit - log user actions without including search terms or document identifiers
- initial release