3.0.6 / 2017-03-14
==================

  * Remove `base64-url` dependency

3.0.5 / 2017-03-07
==================

  * deps: uid-safe@2.1.4
    - Remove `base64-url` dependency

3.0.4 / 2016-11-13
==================

  * deps: base64-url@1.3.3
  * deps: uid-safe@2.1.3
    - deps: base64-url@1.3.3

3.0.3 / 2016-05-26
==================

  * deps: tsscmp@1.0.5

3.0.2 / 2016-05-22
==================

  * Use `tsscmp` module for timing-safe token verification
  * deps: base64-url@1.2.2
  * deps: uid-safe@2.1.1
    - deps: base64-url@1.2.2

3.0.1 / 2016-01-28
==================

  * deps: rndm@1.2.0
  * deps: uid-safe@2.1.0
    - Use `random-bytes` for byte source

3.0.0 / 2015-05-09
==================

  * Remove `tokenize` export
  * Remove `tokenize` option
  * Return a prototype-based object rather than functions
    - This means the resulting functions need to be called as methods
  * Throw when missing secret to `tokens.create()`
  * deps: uid-safe@~2.0.0
    - Use global `Promise` when returning a promise

2.0.7 / 2015-05-03
==================

  * Fix compatibility with `crypto.DEFAULT_ENCODING` global changes

2.0.6 / 2015-02-13
==================

  * deps: base64-url@1.2.1
  * deps: uid-safe@~1.1.0
    - Use `crypto.randomBytes`, if available
    - deps: base64-url@1.2.1

2.0.5 / 2015-01-31
==================

  * deps: base64-url@1.2.0
  * deps: uid-safe@~1.0.3
    - Fix error branch that would throw
    - deps: base64-url@1.2.0

2.0.4 / 2015-01-08
==================

  * deps: uid-safe@~1.0.2
    - Remove dependency on `mz`

2.0.3 / 2014-12-30
==================

  * Slight speed improvement for `verify`
  * deps: base64-url@1.1.0
  * deps: rndm@~1.1.0

2.0.2 / 2014-11-09
==================

  * deps: scmp@1.0.0

2.0.1 / 2014-08-22
==================

  * Rename module to `csrf`

2.0.0 / 2014-06-18
==================

  * Use `uid-safe` module
  * Use `base64-url` module
  * Remove sync `.secret()` -- use `.secretSync()` instead

1.0.4 / 2014-06-11
==================

  * Make sure CSRF tokens are URL safe