Changes since MRBS 1.6.1:

• Fixed a number of security issues in MRBS that were disclosed to the project by SySS GmbH, including XSS, CSRF protection and session fixation.
• Improved behaviour of browser caching in MRBS.
• Improved localisation, especially the use of colons in labels.
• Added new config variable $weekdays to define weekdays and weekends, allowing for the possibility that weekdays are not the same as working days.
• MRBS now restricts form actions which modify data/pass passwords to only accept POSTs.
• Added the ability to have different period names in each area.
• Add SAML auth and session schemes, thanks to Jørn Åne.
• Updated to jQuery 3.2.1 and jQueryUI 1.12.1, which includes XSS fixes.
• Plus a few other bug fixes/improvements.
• Dropped support for Internet Explorer 9 and lower.