Security update

Fixes Features - Less Critical - Denial of Service (DoS) - SA-CONTRIB-2016-020

Changes since 7.x-2.8:

This is a security release improving the access control of product SKU / title lists returned by the Commerce Product module for use in the product reference field's autocomplete widget. For more information, refer to the SA-CONTRIB-2016-019 security advisory.

See Hybridauth - Less critical - Multiple vulnerabilities - SA-CONTRIB-2016-018

Changes since 7.x-2.14:

See SA-CONTRIB-2014-090 - Speech recognition - Multiple vulnerabilities

Login one time - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2016-017

Issue #1761506 by ptmkenny, Rechi: Sent link should use users preferred language

Issue #1751336 by sysosmaster, Rechi: Translation of body and subject

Issue #1906510 by rogical: Add configure link

Fixes to "login_one_time_user_options" function.