Test green

- Packages update

68 files changed, 12285 insertions, 1917 deletions

diff --git a/src/DotNetOpenAuth.BuildTasks/TaskStrings.resx b/src/DotNetOpenAuth.BuildTasks/TaskStrings.resx
index 50e1592..c1f88a7 100644
--- a/src/DotNetOpenAuth.BuildTasks/TaskStrings.resx
+++ b/src/DotNetOpenAuth.BuildTasks/TaskStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,80 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="DeletedWebApplication" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="DeletedWebApplication" xml:space="preserve">
     <value>Web application '{0}' deleted.</value>
   </data>
-  <data name="MismatchingArrayLengths" xml:space="preserve">
+	<data name="MismatchingArrayLengths" xml:space="preserve">
     <value>The {0} and {1} properties must be set to arrays of equal length.</value>
   </data>
-  <data name="NoMatchingWebSiteFound" xml:space="preserve">
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
     <value>No web site with the name '{0}' found.</value>
   </data>
-  <data name="PackingJsFile" xml:space="preserve">
+	<data name="PackingJsFile" xml:space="preserve">
     <value>Packing javascript resource "{0}" into "{1}".</value>
   </data>
-  <data name="SkipPackingJsFile" xml:space="preserve">
+	<data name="SkipPackingJsFile" xml:space="preserve">
     <value>Skip packing "{0}" because its packed version is up to date.</value>
   </data>
-  <data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
     <value>Web application '{0}' was not found, so it was not deleted.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core.UI/DotNetOpenAuth.Core.UI.csproj b/src/DotNetOpenAuth.Core.UI/DotNetOpenAuth.Core.UI.csproj
index c3c5b90..494c198 100644
--- a/src/DotNetOpenAuth.Core.UI/DotNetOpenAuth.Core.UI.csproj
+++ b/src/DotNetOpenAuth.Core.UI/DotNetOpenAuth.Core.UI.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>af3ea530</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -34,18 +35,18 @@
   </ItemGroup>
   <ItemGroup>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions, Version=2.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+    <Reference Include="System.Net.Http.Extensions">
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives, Version=4.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives">
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -55,9 +56,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core.UI/packages.config b/src/DotNetOpenAuth.Core.UI/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.Core.UI/packages.config
+++ b/src/DotNetOpenAuth.Core.UI/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core/DotNetOpenAuth.Core.csproj b/src/DotNetOpenAuth.Core/DotNetOpenAuth.Core.csproj
index 0acc7b6..0e50d9f 100644
--- a/src/DotNetOpenAuth.Core/DotNetOpenAuth.Core.csproj
+++ b/src/DotNetOpenAuth.Core/DotNetOpenAuth.Core.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>c9786f73</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -170,24 +171,28 @@
     <Reference Include="Microsoft.CSharp" />
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.Designer.cs b/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.Designer.cs
index 4f89589..07a05ad 100644
--- a/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.Designer.cs
+++ b/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.Designer.cs
@@ -1,7 +1,7 @@
 //------------------------------------------------------------------------------
 // <auto-generated>
 //     This code was generated by a tool.
-//     Runtime Version:4.0.30319.18010
+//     Runtime Version:4.0.30319.34014
 //
 //     Changes to this file may cause incorrect behavior and will be lost if
 //     the code is regenerated.
diff --git a/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.resx b/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.resx
index 15ca046..4c1e333 100644
--- a/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.resx
+++ b/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,281 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="ArgumentPropertyMissing" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
     <value>Argument's {0}.{1} property is required but is empty or null.</value>
   </data>
-  <data name="CurrentHttpContextRequired" xml:space="preserve">
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
     <value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
   </data>
-  <data name="DataContractMissingFromMessageType" xml:space="preserve">
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
     <value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
   </data>
-  <data name="DataContractMissingNamespace" xml:space="preserve">
+	<data name="DataContractMissingNamespace" xml:space="preserve">
     <value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
   </data>
-  <data name="DerivedTypeNotExpected" xml:space="preserve">
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
     <value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
   </data>
-  <data name="DirectedMessageMissingRecipient" xml:space="preserve">
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
     <value>The directed message's Recipient property must not be null.</value>
   </data>
-  <data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
     <value>The given set of options is not supported by this web request handler.</value>
   </data>
-  <data name="ErrorDeserializingMessage" xml:space="preserve">
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
     <value>Error while deserializing message {0}.</value>
   </data>
-  <data name="ErrorInRequestReplyMessage" xml:space="preserve">
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
     <value>Error occurred while sending a direct message or getting the response.</value>
   </data>
-  <data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
     <value>This exception was not constructed with a root request message that caused it.</value>
   </data>
-  <data name="ExpectedMessageNotReceived" xml:space="preserve">
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
     <value>Expected {0} message but received no recognizable message.</value>
   </data>
-  <data name="ExpiredMessage" xml:space="preserve">
+	<data name="ExpiredMessage" xml:space="preserve">
     <value>The message expired at {0} and it is now {1}.</value>
   </data>
-  <data name="GetOrPostFlagsRequired" xml:space="preserve">
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
     <value>At least one of GET or POST flags must be present.</value>
   </data>
-  <data name="HttpContextRequired" xml:space="preserve">
+	<data name="HttpContextRequired" xml:space="preserve">
     <value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
   </data>
-  <data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
     <value>Messages that indicate indirect transport must implement the {0} interface.</value>
   </data>
-  <data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
     <value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
   </data>
-  <data name="InsufficientMessageProtection" xml:space="preserve">
+	<data name="InsufficientMessageProtection" xml:space="preserve">
     <value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
   </data>
-  <data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
     <value>The customized binding element ordering is invalid.</value>
   </data>
-  <data name="InvalidMessageParts" xml:space="preserve">
+	<data name="InvalidMessageParts" xml:space="preserve">
     <value>Some part(s) of the message have invalid values: {0}</value>
   </data>
-  <data name="InvalidNonceReceived" xml:space="preserve">
+	<data name="InvalidNonceReceived" xml:space="preserve">
     <value>The incoming message had an invalid or missing nonce.</value>
   </data>
-  <data name="KeyAlreadyExists" xml:space="preserve">
+	<data name="KeyAlreadyExists" xml:space="preserve">
     <value>An item with the same key has already been added.</value>
   </data>
-  <data name="MessageNotExtensible" xml:space="preserve">
+	<data name="MessageNotExtensible" xml:space="preserve">
     <value>The {0} message does not support extensions.</value>
   </data>
-  <data name="MessagePartEncoderWrongType" xml:space="preserve">
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
     <value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
   </data>
-  <data name="MessagePartReadFailure" xml:space="preserve">
+	<data name="MessagePartReadFailure" xml:space="preserve">
     <value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
   </data>
-  <data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
     <value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
   </data>
-  <data name="MessagePartWriteFailure" xml:space="preserve">
+	<data name="MessagePartWriteFailure" xml:space="preserve">
     <value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
   </data>
-  <data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
     <value>A message response is already queued for sending in the response stream.</value>
   </data>
-  <data name="ReplayAttackDetected" xml:space="preserve">
+	<data name="ReplayAttackDetected" xml:space="preserve">
     <value>This message has already been processed.  This could indicate a replay attack in progress.</value>
   </data>
-  <data name="ReplayProtectionNotSupported" xml:space="preserve">
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
     <value>This channel does not support replay protection.</value>
   </data>
-  <data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
     <value>The following required non-empty parameters were empty in the {0} message: {1}</value>
   </data>
-  <data name="RequiredParametersMissing" xml:space="preserve">
+	<data name="RequiredParametersMissing" xml:space="preserve">
     <value>The following required parameters were missing from the {0} message: {1}</value>
   </data>
-  <data name="RequiredProtectionMissing" xml:space="preserve">
+	<data name="RequiredProtectionMissing" xml:space="preserve">
     <value>The binding element offering the {0} protection requires other protection that is not provided.</value>
   </data>
-  <data name="SequenceContainsNoElements" xml:space="preserve">
+	<data name="SequenceContainsNoElements" xml:space="preserve">
     <value>The list is empty.</value>
   </data>
-  <data name="SequenceContainsNullElement" xml:space="preserve">
+	<data name="SequenceContainsNullElement" xml:space="preserve">
     <value>The list contains a null element.</value>
   </data>
-  <data name="SignatureInvalid" xml:space="preserve">
+	<data name="SignatureInvalid" xml:space="preserve">
     <value>Message signature was incorrect.</value>
   </data>
-  <data name="SigningNotSupported" xml:space="preserve">
+	<data name="SigningNotSupported" xml:space="preserve">
     <value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
   </data>
-  <data name="StreamUnreadable" xml:space="preserve">
+	<data name="StreamUnreadable" xml:space="preserve">
     <value>The stream's CanRead property returned false.</value>
   </data>
-  <data name="StreamUnwritable" xml:space="preserve">
+	<data name="StreamUnwritable" xml:space="preserve">
     <value>The stream's CanWrite property returned false.</value>
   </data>
-  <data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
     <value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
   </data>
-  <data name="TooManyRedirects" xml:space="preserve">
+	<data name="TooManyRedirects" xml:space="preserve">
     <value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
   </data>
-  <data name="UnexpectedEmptyArray" xml:space="preserve">
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
     <value>The array must not be empty.</value>
   </data>
-  <data name="UnexpectedEmptyString" xml:space="preserve">
+	<data name="UnexpectedEmptyString" xml:space="preserve">
     <value>The empty string is not allowed.</value>
   </data>
-  <data name="UnexpectedMessagePartValue" xml:space="preserve">
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
     <value>Message parameter '{0}' had unexpected value '{1}'.</value>
   </data>
-  <data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
     <value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
   </data>
-  <data name="UnexpectedMessageReceived" xml:space="preserve">
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
     <value>Expected message {0} but received {1} instead.</value>
   </data>
-  <data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
     <value>Unexpected message type received.</value>
   </data>
-  <data name="UnexpectedNullKey" xml:space="preserve">
+	<data name="UnexpectedNullKey" xml:space="preserve">
     <value>A null key was included and is not allowed.</value>
   </data>
-  <data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
     <value>A null or empty key was included and is not allowed.</value>
   </data>
-  <data name="UnexpectedNullValue" xml:space="preserve">
+	<data name="UnexpectedNullValue" xml:space="preserve">
     <value>A null value was included for key '{0}' and is not allowed.</value>
   </data>
-  <data name="UnexpectedType" xml:space="preserve">
+	<data name="UnexpectedType" xml:space="preserve">
     <value>The type {0} or a derived type was expected, but {1} was given.</value>
   </data>
-  <data name="UnrecognizedEnumValue" xml:space="preserve">
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
     <value>{0} property has unrecognized value {1}.</value>
   </data>
-  <data name="UnsafeWebRequestDetected" xml:space="preserve">
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
     <value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
   </data>
-  <data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
     <value>Redirects on POST requests that are to untrusted servers is not supported.</value>
   </data>
-  <data name="WebRequestFailed" xml:space="preserve">
+	<data name="WebRequestFailed" xml:space="preserve">
     <value>Web request to '{0}' failed.</value>
   </data>
-  <data name="ExceptionUndeliverable" xml:space="preserve">
+	<data name="ExceptionUndeliverable" xml:space="preserve">
     <value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
   </data>
-  <data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
     <value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
   </data>
-  <data name="UnexpectedHttpStatusCode" xml:space="preserve">
-    <value>Expected direct response to use HTTP status code {0} but was {1} instead.</value>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+    <value>Unexpected HTTP status code {0} {1} received in direct response.</value>
   </data>
-  <data name="UnsupportedHttpVerb" xml:space="preserve">
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
     <value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
   </data>
-  <data name="NonEmptyStringExpected" xml:space="preserve">
+	<data name="NonEmptyStringExpected" xml:space="preserve">
     <value>A non-empty string was expected.</value>
   </data>
-  <data name="StreamMustHaveKnownLength" xml:space="preserve">
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
     <value>The stream must have a known length.</value>
   </data>
-  <data name="BinaryDataRequiresMultipart" xml:space="preserve">
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
     <value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
   </data>
-  <data name="SessionRequired" xml:space="preserve">
+	<data name="SessionRequired" xml:space="preserve">
     <value>An HttpContext.Current.Session object is required.</value>
   </data>
-  <data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
     <value>This message factory does not support message type(s): {0}</value>
   </data>
-  <data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
     <value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
   </data>
-  <data name="EncoderInstantiationFailed" xml:space="preserve">
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
     <value>Unable to instantiate the message part encoder/decoder type {0}.</value>
   </data>
-  <data name="MessageTimestampInFuture" xml:space="preserve">
+	<data name="MessageTimestampInFuture" xml:space="preserve">
     <value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
   </data>
-  <data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
     <value>This blob is not a recognized encryption format.</value>
   </data>
-  <data name="ExtraParameterAddFailure" xml:space="preserve">
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
     <value>Failed to add extra parameter '{0}' with value '{1}'.</value>
   </data>
-  <data name="ExpectedParameterWasMissing" xml:space="preserve">
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
     <value>The message part {0} was expected in the {1} message but was not found.</value>
   </data>
-  <data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
     <value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
   </data>
-  <data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
     <value>Missing decryption key for bucket "{0}" handle "{1}"</value>
   </data>
-  <data name="UnexpectedBufferLength" xml:space="preserve">
+	<data name="UnexpectedBufferLength" xml:space="preserve">
     <value>Unexpected buffer length.</value>
   </data>
-  <data name="DataCorruptionDetected" xml:space="preserve">
+	<data name="DataCorruptionDetected" xml:space="preserve">
     <value>Decoding failed due to data corruption.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.sr.resx b/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.sr.resx
index 5b7b716..d2d01cf 100644
--- a/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.sr.resx
+++ b/src/DotNetOpenAuth.Core/Messaging/MessagingStrings.sr.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,236 +59,516 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="ArgumentPropertyMissing" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
     <value>Svojstvo {0}.{1} argumenta je neophodno, ali je ono prazno ili nepostojeće.</value>
   </data>
-  <data name="CurrentHttpContextRequired" xml:space="preserve">
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
     <value>HttpContext.Current je nepostojeći.  Mora postojati ASP.NET zahtev u procesu da bi ova operacija bila uspešna.</value>
   </data>
-  <data name="DataContractMissingFromMessageType" xml:space="preserve">
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
     <value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0}.  Da li nedostaje [DataContract] atribut?</value>
   </data>
-  <data name="DataContractMissingNamespace" xml:space="preserve">
+	<data name="DataContractMissingNamespace" xml:space="preserve">
     <value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0} jer svojstvo DataContractAttribute.Namespace property nije podešeno.</value>
   </data>
-  <data name="DerivedTypeNotExpected" xml:space="preserve">
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
     <value>Instanca tipa {0} je bila očekivana, a primljena je neočekivana izvedena instanca tipa {1}.</value>
   </data>
-  <data name="DirectedMessageMissingRecipient" xml:space="preserve">
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
     <value>Svojstvo Recipient usmerene poruke ne sme biti nepostojeće.</value>
   </data>
-  <data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
-    <value>Dati set opcija ({0}) nije podržan od strane {1}.</value>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+    <value>Dati set opcija nije podržan od strane.</value>
   </data>
-  <data name="ErrorDeserializingMessage" xml:space="preserve">
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
     <value>Greška prilikom deserijalizacije poruke {0}.</value>
   </data>
-  <data name="ErrorInRequestReplyMessage" xml:space="preserve">
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
     <value>Greška se desila tokom slanja usmerene poruke ili tokom primanja odgovora.</value>
   </data>
-  <data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
     <value>Ovaj izuzetak nije napravljen sa početnom porukom koja ga je izazvala.</value>
   </data>
-  <data name="ExpectedMessageNotReceived" xml:space="preserve">
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
     <value>Očekivana je poruka {0} a primljena poruka nije prepoznata.</value>
   </data>
-  <data name="ExpiredMessage" xml:space="preserve">
+	<data name="ExpiredMessage" xml:space="preserve">
     <value>Poruka ističe u {0} a sada je {1}.</value>
   </data>
-  <data name="GetOrPostFlagsRequired" xml:space="preserve">
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
     <value>Bar jedan od GET ili POST flegova mora biti prisutan.</value>
   </data>
-  <data name="HttpContextRequired" xml:space="preserve">
+	<data name="HttpContextRequired" xml:space="preserve">
     <value>Ovaj metod zahteva tekući HttpContext. Kao alternativa, koristite preklopljeni metod koji dozvoljava da se prosledi informacija bez HttpContext-a.</value>
   </data>
-  <data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
     <value>Poruke koje ukazuju na indirektni transport moraju implementirati {0} interfejs.</value>
   </data>
-  <data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
     <value>Nebezbedan web zahtev za '{0}' prekinut zbog bezbednosnih zahteva koji zahtevaju HTTPS.</value>
   </data>
-  <data name="InsufficientMessageProtection" xml:space="preserve">
+	<data name="InsufficientMessageProtection" xml:space="preserve">
     <value>Poruka {0} je zahtevala zaštite {{{1}}} ali prenosni kanal nije mogao primeniti {{{2}}}.</value>
   </data>
-  <data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
     <value>Redosled prilagođenih vezujućih elemenata je neispravan.</value>
   </data>
-  <data name="InvalidMessageParts" xml:space="preserve">
+	<data name="InvalidMessageParts" xml:space="preserve">
     <value>Neki deo ili delovi poruke imaju nevalidne vrednosti: {0}</value>
   </data>
-  <data name="InvalidNonceReceived" xml:space="preserve">
+	<data name="InvalidNonceReceived" xml:space="preserve">
     <value>Primljena poruka imala je neispravan ili nedostajući jedinstveni identifikator.</value>
   </data>
-  <data name="KeyAlreadyExists" xml:space="preserve">
+	<data name="KeyAlreadyExists" xml:space="preserve">
     <value>Element sa istom vrednošću ključa je već dodat.</value>
   </data>
-  <data name="MessageNotExtensible" xml:space="preserve">
+	<data name="MessageNotExtensible" xml:space="preserve">
     <value>Poruka {0} ne podržava ekstenzije.</value>
   </data>
-  <data name="MessagePartEncoderWrongType" xml:space="preserve">
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
     <value>Vrednost za {0}.{1} člana {1} je trebala da bude izvedena od  {2} ali je izvedena od {3}.</value>
   </data>
-  <data name="MessagePartReadFailure" xml:space="preserve">
+	<data name="MessagePartReadFailure" xml:space="preserve">
     <value>Greška prilikom čitanja poruke '{0}' parametar '{1}' sa vrednošću '{2}'.</value>
   </data>
-  <data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
     <value>Parametar poruke '{0}' sa vrednošću '{1}' nije se base64-dekodovao.</value>
   </data>
-  <data name="MessagePartWriteFailure" xml:space="preserve">
+	<data name="MessagePartWriteFailure" xml:space="preserve">
     <value>Greška prilikom pripremanja poruke '{0}' parametra '{1}' za slanje.</value>
   </data>
-  <data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
     <value>Poruka-odgovor je već u redu za slanje u stream-u za odgovore.</value>
   </data>
-  <data name="ReplayAttackDetected" xml:space="preserve">
+	<data name="ReplayAttackDetected" xml:space="preserve">
     <value>Ova poruka je već obrađena.  Ovo može ukazivati na replay napad u toku.</value>
   </data>
-  <data name="ReplayProtectionNotSupported" xml:space="preserve">
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
     <value>Ovaj kanal ne podržava replay zaštitu.</value>
   </data>
-  <data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
     <value>Sledeći zahtevani parametri koji ne smeju biti prazni su bili prazni u {0} poruke: {1}</value>
   </data>
-  <data name="RequiredParametersMissing" xml:space="preserve">
+	<data name="RequiredParametersMissing" xml:space="preserve">
     <value>Sledeći zahtevani parametri nedostaju u {0} poruke: {1}</value>
   </data>
-  <data name="RequiredProtectionMissing" xml:space="preserve">
+	<data name="RequiredProtectionMissing" xml:space="preserve">
     <value>Povezujući element koji nudi {0} zaštitu zahteva drugu zaštitu koja nije ponuđena.</value>
   </data>
-  <data name="SequenceContainsNoElements" xml:space="preserve">
+	<data name="SequenceContainsNoElements" xml:space="preserve">
     <value>Lista je prazna.</value>
   </data>
-  <data name="SequenceContainsNullElement" xml:space="preserve">
+	<data name="SequenceContainsNullElement" xml:space="preserve">
     <value>Lista sadrži prazan (null) element.</value>
   </data>
-  <data name="SignatureInvalid" xml:space="preserve">
+	<data name="SignatureInvalid" xml:space="preserve">
     <value>Potpis poruke je neispravan.</value>
   </data>
-  <data name="SigningNotSupported" xml:space="preserve">
+	<data name="SigningNotSupported" xml:space="preserve">
     <value>Ovaj kanal ne podržava potpisivanje poruka. Da bi podržao potpisivanje poruka, izvedeni tip Channel mora preklopiti Sign i IsSignatureValid metode.</value>
   </data>
-  <data name="StreamUnreadable" xml:space="preserve">
+	<data name="StreamUnreadable" xml:space="preserve">
     <value>Svojstvo stream-a CanRead je vratilo false.</value>
   </data>
-  <data name="StreamUnwritable" xml:space="preserve">
+	<data name="StreamUnwritable" xml:space="preserve">
     <value>Svojstvo stream-a CanWrite je vratilo false.</value>
   </data>
-  <data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
     <value>Očekivano je da najviše 1 povezujući element primeni zaštitu {0}, ali je više njih primenjeno.</value>
   </data>
-  <data name="TooManyRedirects" xml:space="preserve">
+	<data name="TooManyRedirects" xml:space="preserve">
     <value>Maksimalno dozvoljeni broj redirekcija je prekoračen u toku zahtevanja '{0}'.</value>
   </data>
-  <data name="UnexpectedEmptyArray" xml:space="preserve">
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
     <value>Niz ne sme biti prazan.</value>
   </data>
-  <data name="UnexpectedEmptyString" xml:space="preserve">
+	<data name="UnexpectedEmptyString" xml:space="preserve">
     <value>Prazan string nije dozvoljen.</value>
   </data>
-  <data name="UnexpectedMessagePartValue" xml:space="preserve">
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
     <value>Parametar poruke '{0}' ima neočekivanu '{1}'.</value>
   </data>
-  <data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
     <value>Očekivano je da od poruke {0} parametar '{1}' ima vrednost '{2}' ali je imao vrednost '{3}'.</value>
   </data>
-  <data name="UnexpectedMessageReceived" xml:space="preserve">
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
     <value>Očekivana je poruka {0} ali je umesto nje primljena {1}.</value>
   </data>
-  <data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
     <value>Poruka neočekivanog tipa je primljena.</value>
   </data>
-  <data name="UnexpectedNullKey" xml:space="preserve">
+	<data name="UnexpectedNullKey" xml:space="preserve">
     <value>null ključ je uključen a nije dozvoljen.</value>
   </data>
-  <data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
     <value>null ili prazan ključ je uključen a nije dozvoljen.</value>
   </data>
-  <data name="UnexpectedNullValue" xml:space="preserve">
+	<data name="UnexpectedNullValue" xml:space="preserve">
     <value>null vrednost je uključena za ključ '{0}' a nije dozvoljena.</value>
   </data>
-  <data name="UnexpectedType" xml:space="preserve">
+	<data name="UnexpectedType" xml:space="preserve">
     <value>Tip {0} ili izvedeni tip je očekivan, a dat je {1}.</value>
   </data>
-  <data name="UnrecognizedEnumValue" xml:space="preserve">
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
     <value>{0} svojstvo ima nepoznatu vrednost {1}.</value>
   </data>
-  <data name="UnsafeWebRequestDetected" xml:space="preserve">
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
     <value>URL '{0}' je rangiran kao nebezbedan i ne može se zahtevati na ovaj način.</value>
   </data>
-  <data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
     <value>Redirekcije na POST zahteve usmerene ka serverima kojima se ne veruje nisu podržane.</value>
   </data>
-  <data name="WebRequestFailed" xml:space="preserve">
+	<data name="WebRequestFailed" xml:space="preserve">
     <value>Web zahtev za '{0}' nije uspeo.</value>
   </data>
-  <data name="ExceptionUndeliverable" xml:space="preserve">
+	<data name="ExceptionUndeliverable" xml:space="preserve">
     <value>Ovaj izuzetak mora se kreirati zajedno sa primaocem koji će primiti poruku o grešci ili sa instancom poruke direktnog zahteva na koju će ovaj izuzetak odgovoriti.</value>
   </data>
-  <data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
     <value>'{0}' poruka ne može biti primljeno sa HTTP glagolom '{1}'.</value>
   </data>
-  <data name="UnexpectedHttpStatusCode" xml:space="preserve">
-    <value>Očekivano je da direktan odgovor koristi HTTP status kod {0} a korišćen je {1}.</value>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+    <value>Neočekivani HTTP statusni kod {0} {1} primljen u direktnom odgovoru.</value>
   </data>
-  <data name="UnsupportedHttpVerb" xml:space="preserve">
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
     <value>HTTP glagol '{0}' je neprepoznat i nije podržan.</value>
   </data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>Nijedan PPID provajder nije konfigurisan.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Ne može se poslati pristupni token za Consumera za token zahteva '{0}' pre nego što bude autorizovan.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>Pristupni token '{0}' je neispravan ili je mu je istekao rok važenja.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Greška u traženju šifre za korisnika ili za token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument je neispravan.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>Neispravna OAuth poruka je primljena i odbačena.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>Poruka {0} je sadržala višak podataka koji nije dozvoljen.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>Ovaj provajder OAuth usluge zahteva od OAuth korisnika da da implementira OAuth {0}, ali izgleda da korisnika podržava jedino {1}.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Korišćenje OpenID+OAuth ekstenzije zahteva da token menadžer koji se koristi implementira {0} interfejs.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>OpenID Relying Party domen nije prepoznat kao da pripada OAuth Consumeru identifikovanom po datom korisničkom tokenu.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>URL upit zahteva NE SME sadržati bilo kakve OAuth Protocol Parametre.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>Potpisujući element je već asociran sa kanalom.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>Svi elementi za potpisivanje moraju nuditi istu zaštitu poruke.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>Token u poruci nije prepoznat od strane provajdera usluge.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>RSA-SHA1 potpisujući povezujući element nije podešen sa sertifikatom za potpisivanje.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>Absolutni URI je zahtevan za ovu vrednost.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>Dužina deljene tajne ({0}) ne slaže se sa dužinom zahtevanom od povezujućeg tipa ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>Dužina šifrovane deljene tajne ({0}) ne slaže se sa dužinom hashing algoritma ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>Ako je dato povezujuće skladište, jedinstveni identifikator skladišta takođe mora biti prisutan.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>Dostavljeni privatni podaci ne slažu se ni sa jednim poznatim Association tipom.  Dužina im je možda prekratka ili su podaci neispravni.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback argumenti su podržani jedino kada je {0} dustupan za {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>Simple Registration zahtev može generisati odgovor jedino na prijemnoj strani.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.claimed_id i openid.identity parametri moraju istovremeno biti prisutni ili nedostajati.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo ne može se podesiti kada IsDelegatedIdentifier ima vrednost true da bi se izbeglo narušavanje OpenID URL delegiranja.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo se najpre mora podesiti.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>Sledeća svojstva moraju biti podešena pre nego što Diffie-Hellmanov algoritam može generisati javni ključ: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI nije SSL a svojstvo requireSslDiscovery je podešeno na true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>Prostor deljenja proširenja '{0}' je već dodat. Samo jedno proširenje po prostoru je dozvoljeno u datom zahtevu.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Ne može se tražiti podrška za proširenja na rehidriranom ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Segmenti fragmenta se ne primenjuju na XRI identifikatore.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier i LocalIdentifier moraju biti isti kada IsIdentifierSelect ima vrednost true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Kontakt: {1}, Referenca: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Ne može se enkodovati '{0}' jer sadrži nevalidan znak za Key-Value Form enkodiranje.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Ne može se dekodovati Key-Value Form jer je pronađena linija bez  '{0}' znaka.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>Šema mora biti http ili https a bila je '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>Vrednost '{0}' nije validan URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Nije prepoznat XRI format'.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>OpenID Provider dao je iskaz za Identifier čije se informacije o pronalaženju ne slažu. 
+Informacije o krajnoj tački iskaza: 
+{0}
+Informacije o otkrivenoj krajnjoj tački:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>Lista ključeva se ne slaže sa ponuđenim rečnikom.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>Parametri '{0}' i '{1}' moraju oba biti ili ne smeju oba biti '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanom dužinom {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanim imenom '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Osim ako se ne koristi enkripcija transportnog sloja, "no-encryption" NE SME biti korišćen.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman sesija tipa '{0}' nije pronađena za OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>Nijedna OpenID krajnja tačka nije pronađena.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>Ova operacija je jedino dozvoljena kada je IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Nije moguće utvrditi verziju OpenID protokola implementiranog od strane Provider-a na krajnjoj tački '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>HTTP zahtev ka URL-u domena ({0}) rezultovao je redirekcijom, koja nije dozvoljena u togu pronalaženja Relying Party.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' nije unutar domena '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>{0} parametar ({1}) se ne slaže sa trenutnim URL ({2}) sa kojim je zahtev napravljen.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>openid.return_to parametar je neophodan u poruci zahteva da bi se konstruisao odgovor, ali ovaj parametar nedostaje.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>Sledeći parametri nisu uključeni u potpis a moraju da budu: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Neispravna vrednost za datum rođenja.  Mora biti u formi gggg-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>Tip mora implementirati {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>openid.user_setup_url parametar je neophodan prilikom slanja negativnih poruka sa iskazima prilikom odgovaranja na zahteve u trenutnom modu.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI razrešivanje neuspešno.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>Atribut sa URI tipom '{0}' je već dodat.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Samo {0} vrednosti za atribut '{1}' su zahtevane, ali {2} su ponuđene.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Prosleđivanje objekta tipa DateTime čije svojstvo Kind ima vrednost Unspecified nije dozvoljeno.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>Zahtevani tip asocijacije '{0}' sa sesijom tipa '{1}' nije prepoznat ili nije podržan od strane ovog Provider-a  zbog bezbedonosnih zahteva.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>Provider je zahtevao asocijaciju tipa '{0}' i sesiju tipa '{1}', koje nisu međusobno kompatibilne.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>Zahtev za autentifikacijom je već kreiran korišćenjem CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>Nijedan OpenID url nije ponuđen.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>Ekstenzija sa svojstvom ovog imena ('{0}') je već registrovana.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>Ekstenzija '{0}' je već registrovana.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>Ova operacija nije podržana od strane serijalizovanih odgovora za autentifikaciju. Pokušati ovu operaciju iz LoggedIn handler-a događaja.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>Nijedan XRDS dokument koji sadrži informaciju o OpenID Relying Party krajnjoj tački nije pronadjen u {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>Nezahtevani iskaz ne može biti poslat za navedeni identifikator {0} jer ovo nije autorizovani Provider za taj identifikator.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>Maksimalno dozvoljeno vreme za kompletiranje autentifikacije je isteklo. Molimo pokušajte ponovo.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Ne može se pronaći tajna za potpisivanje od strane handle-a '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>Odgovor nije spreman.  Koristiti najpre IsResponseReady za proveru da li je odgovor spreman.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>Ovo svojstvo nije dostupno zbog nepoznate konfiguracije kanala.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.identity i openid.claimed_id parametri moraju istovremeno biti prisutna ili istovremeno odsutna u poruci.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>Svojstvo ReturnTo ne sme biti null da bi se podržala ova operacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Odbijanje nezahtevanih iskaza zahteva skladište jedinstvenih identifikatora i skladište asocijacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane ovog Relying Party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Samo OpenID-jevi izdati direktno od strane njihovog OpenID Provider-a su ovde dozvoljeni.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI podrška je onemogućena na ovom sajtu.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>Skladište asocijacija nije dato a zahtevano je za trenutnu konfiguraciju.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>Svojstvo {0} je imalo neočekivanu vrednost {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>Ni jedan identifikator nije podešen.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>Ova vrednost svojstva nije podržana od strane ove kontrole.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>Ovo je već PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Žao nam je.  Ovaj sajt jedino prihvata OpenID-jeve koji su HTTPS-bezbedni, a {0} nije bezbedni Identifier.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>Tekući HttpContext nije detektovan, tako da {0} instanca mora biti eksplicitno postavljena ili specificirana u .config fajlu.  Pozvati preklopljeni konstruktor koji uzima parametar {0}.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>Konfiguraciono zavisni tip {0} mora biti javan, a on to nije.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>Konfiguraciona XAML referenca na {0} zahteva da se trenutni HttpContext razreši.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID provera neuspešna.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Greška u obradi XRDS dokumenta.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>XRDS dokumentu za XRI {0} nedostaje neophodni CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Ne može se pronaći XRI resolution Status tag ili je code attribute neispravan.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core/Strings.resx b/src/DotNetOpenAuth.Core/Strings.resx
index 1c2aee2..1de4f1d 100644
--- a/src/DotNetOpenAuth.Core/Strings.resx
+++ b/src/DotNetOpenAuth.Core/Strings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,92 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
     <value>The configuration-specified type {0} must be public, and is not.</value>
   </data>
-  <data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
     <value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
   </data>
-  <data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
     <value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
   </data>
-  <data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
     <value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
   </data>
-  <data name="EmptyStringNotAllowed" xml:space="preserve">
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
     <value>The empty string is not allowed.</value>
   </data>
-  <data name="InvalidArgument" xml:space="preserve">
+	<data name="InvalidArgument" xml:space="preserve">
     <value>The argument has an unexpected value.</value>
   </data>
-  <data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
     <value>The property {0} must be set before this operation is allowed.</value>
   </data>
-  <data name="ResponseBodyNotSupported" xml:space="preserve">
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
     <value>This object contains a response body, which is not supported.</value>
   </data>
-  <data name="HostFactoriesRequired" xml:space="preserve">
+	<data name="HostFactoriesRequired" xml:space="preserve">
     <value>The HostFactories property must be set first.</value>
   </data>
-  <data name="Generic_CryptoFailure" xml:space="preserve">
+	<data name="Generic_CryptoFailure" xml:space="preserve">
     <value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core/Strings.sr.resx b/src/DotNetOpenAuth.Core/Strings.sr.resx
index 5112265..88619f9 100644
--- a/src/DotNetOpenAuth.Core/Strings.sr.resx
+++ b/src/DotNetOpenAuth.Core/Strings.sr.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,68 +59,516 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
     <value>Konfiguraciono zavisni tip {0} mora biti javan, a on to nije.</value>
   </data>
-  <data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
     <value>Konfiguraciona XAML referenca na {0} zahteva da se trenutni HttpContext razreši.</value>
   </data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>Nijedan PPID provajder nije konfigurisan.</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Svojstvo {0}.{1} argumenta je neophodno, ali je ono prazno ili nepostojeće.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current je nepostojeći.  Mora postojati ASP.NET zahtev u procesu da bi ova operacija bila uspešna.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0}.  Da li nedostaje [DataContract] atribut?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0} jer svojstvo DataContractAttribute.Namespace property nije podešeno.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>Instanca tipa {0} je bila očekivana, a primljena je neočekivana izvedena instanca tipa {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>Svojstvo Recipient usmerene poruke ne sme biti nepostojeće.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>Dati set opcija nije podržan od strane.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Greška prilikom deserijalizacije poruke {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Greška se desila tokom slanja usmerene poruke ili tokom primanja odgovora.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>Ovaj izuzetak nije napravljen sa početnom porukom koja ga je izazvala.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} a primljena poruka nije prepoznata.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>Poruka ističe u {0} a sada je {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>Bar jedan od GET ili POST flegova mora biti prisutan.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>Ovaj metod zahteva tekući HttpContext. Kao alternativa, koristite preklopljeni metod koji dozvoljava da se prosledi informacija bez HttpContext-a.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Poruke koje ukazuju na indirektni transport moraju implementirati {0} interfejs.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Nebezbedan web zahtev za '{0}' prekinut zbog bezbednosnih zahteva koji zahtevaju HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>Poruka {0} je zahtevala zaštite {{{1}}} ali prenosni kanal nije mogao primeniti {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>Redosled prilagođenih vezujućih elemenata je neispravan.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Neki deo ili delovi poruke imaju nevalidne vrednosti: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>Primljena poruka imala je neispravan ili nedostajući jedinstveni identifikator.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>Element sa istom vrednošću ključa je već dodat.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>Poruka {0} ne podržava ekstenzije.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>Vrednost za {0}.{1} člana {1} je trebala da bude izvedena od  {2} ali je izvedena od {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Greška prilikom čitanja poruke '{0}' parametar '{1}' sa vrednošću '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Parametar poruke '{0}' sa vrednošću '{1}' nije se base64-dekodovao.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Greška prilikom pripremanja poruke '{0}' parametra '{1}' za slanje.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>Poruka-odgovor je već u redu za slanje u stream-u za odgovore.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>Ova poruka je već obrađena.  Ovo može ukazivati na replay napad u toku.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava replay zaštitu.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>Sledeći zahtevani parametri koji ne smeju biti prazni su bili prazni u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>Sledeći zahtevani parametri nedostaju u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>Povezujući element koji nudi {0} zaštitu zahteva drugu zaštitu koja nije ponuđena.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>Lista je prazna.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>Lista sadrži prazan (null) element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Potpis poruke je neispravan.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava potpisivanje poruka. Da bi podržao potpisivanje poruka, izvedeni tip Channel mora preklopiti Sign i IsSignatureValid metode.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>Svojstvo stream-a CanRead je vratilo false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>Svojstvo stream-a CanWrite je vratilo false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Očekivano je da najviše 1 povezujući element primeni zaštitu {0}, ali je više njih primenjeno.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>Maksimalno dozvoljeni broj redirekcija je prekoračen u toku zahtevanja '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>Niz ne sme biti prazan.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>Prazan string nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Parametar poruke '{0}' ima neočekivanu '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Očekivano je da od poruke {0} parametar '{1}' ima vrednost '{2}' ali je imao vrednost '{3}'.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} ali je umesto nje primljena {1}.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Poruka neočekivanog tipa je primljena.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>null ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>null ili prazan ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>null vrednost je uključena za ključ '{0}' a nije dozvoljena.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>Tip {0} ili izvedeni tip je očekivan, a dat je {1}.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} svojstvo ima nepoznatu vrednost {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>URL '{0}' je rangiran kao nebezbedan i ne može se zahtevati na ovaj način.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirekcije na POST zahteve usmerene ka serverima kojima se ne veruje nisu podržane.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web zahtev za '{0}' nije uspeo.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>Ovaj izuzetak mora se kreirati zajedno sa primaocem koji će primiti poruku o grešci ili sa instancom poruke direktnog zahteva na koju će ovaj izuzetak odgovoriti.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' poruka ne može biti primljeno sa HTTP glagolom '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Neočekivani HTTP statusni kod {0} {1} primljen u direktnom odgovoru.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>HTTP glagol '{0}' je neprepoznat i nije podržan.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Ne može se poslati pristupni token za Consumera za token zahteva '{0}' pre nego što bude autorizovan.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>Pristupni token '{0}' je neispravan ili je mu je istekao rok važenja.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Greška u traženju šifre za korisnika ili za token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument je neispravan.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>Neispravna OAuth poruka je primljena i odbačena.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>Poruka {0} je sadržala višak podataka koji nije dozvoljen.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>Ovaj provajder OAuth usluge zahteva od OAuth korisnika da da implementira OAuth {0}, ali izgleda da korisnika podržava jedino {1}.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Korišćenje OpenID+OAuth ekstenzije zahteva da token menadžer koji se koristi implementira {0} interfejs.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>OpenID Relying Party domen nije prepoznat kao da pripada OAuth Consumeru identifikovanom po datom korisničkom tokenu.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>URL upit zahteva NE SME sadržati bilo kakve OAuth Protocol Parametre.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>Potpisujući element je već asociran sa kanalom.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>Svi elementi za potpisivanje moraju nuditi istu zaštitu poruke.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>Token u poruci nije prepoznat od strane provajdera usluge.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>RSA-SHA1 potpisujući povezujući element nije podešen sa sertifikatom za potpisivanje.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>Absolutni URI je zahtevan za ovu vrednost.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>Dužina deljene tajne ({0}) ne slaže se sa dužinom zahtevanom od povezujućeg tipa ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>Dužina šifrovane deljene tajne ({0}) ne slaže se sa dužinom hashing algoritma ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>Ako je dato povezujuće skladište, jedinstveni identifikator skladišta takođe mora biti prisutan.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>Dostavljeni privatni podaci ne slažu se ni sa jednim poznatim Association tipom.  Dužina im je možda prekratka ili su podaci neispravni.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback argumenti su podržani jedino kada je {0} dustupan za {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>Simple Registration zahtev može generisati odgovor jedino na prijemnoj strani.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.claimed_id i openid.identity parametri moraju istovremeno biti prisutni ili nedostajati.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo ne može se podesiti kada IsDelegatedIdentifier ima vrednost true da bi se izbeglo narušavanje OpenID URL delegiranja.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo se najpre mora podesiti.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>Sledeća svojstva moraju biti podešena pre nego što Diffie-Hellmanov algoritam može generisati javni ključ: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI nije SSL a svojstvo requireSslDiscovery je podešeno na true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>Prostor deljenja proširenja '{0}' je već dodat. Samo jedno proširenje po prostoru je dozvoljeno u datom zahtevu.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Ne može se tražiti podrška za proširenja na rehidriranom ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Segmenti fragmenta se ne primenjuju na XRI identifikatore.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier i LocalIdentifier moraju biti isti kada IsIdentifierSelect ima vrednost true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Kontakt: {1}, Referenca: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Ne može se enkodovati '{0}' jer sadrži nevalidan znak za Key-Value Form enkodiranje.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Ne može se dekodovati Key-Value Form jer je pronađena linija bez  '{0}' znaka.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>Šema mora biti http ili https a bila je '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>Vrednost '{0}' nije validan URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Nije prepoznat XRI format'.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>OpenID Provider dao je iskaz za Identifier čije se informacije o pronalaženju ne slažu. 
+Informacije o krajnoj tački iskaza: 
+{0}
+Informacije o otkrivenoj krajnjoj tački:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>Lista ključeva se ne slaže sa ponuđenim rečnikom.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>Parametri '{0}' i '{1}' moraju oba biti ili ne smeju oba biti '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanom dužinom {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanim imenom '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Osim ako se ne koristi enkripcija transportnog sloja, "no-encryption" NE SME biti korišćen.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman sesija tipa '{0}' nije pronađena za OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>Nijedna OpenID krajnja tačka nije pronađena.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>Ova operacija je jedino dozvoljena kada je IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Nije moguće utvrditi verziju OpenID protokola implementiranog od strane Provider-a na krajnjoj tački '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>HTTP zahtev ka URL-u domena ({0}) rezultovao je redirekcijom, koja nije dozvoljena u togu pronalaženja Relying Party.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' nije unutar domena '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>{0} parametar ({1}) se ne slaže sa trenutnim URL ({2}) sa kojim je zahtev napravljen.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>openid.return_to parametar je neophodan u poruci zahteva da bi se konstruisao odgovor, ali ovaj parametar nedostaje.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>Sledeći parametri nisu uključeni u potpis a moraju da budu: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Neispravna vrednost za datum rođenja.  Mora biti u formi gggg-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>Tip mora implementirati {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>openid.user_setup_url parametar je neophodan prilikom slanja negativnih poruka sa iskazima prilikom odgovaranja na zahteve u trenutnom modu.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI razrešivanje neuspešno.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>Atribut sa URI tipom '{0}' je već dodat.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Samo {0} vrednosti za atribut '{1}' su zahtevane, ali {2} su ponuđene.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Prosleđivanje objekta tipa DateTime čije svojstvo Kind ima vrednost Unspecified nije dozvoljeno.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>Zahtevani tip asocijacije '{0}' sa sesijom tipa '{1}' nije prepoznat ili nije podržan od strane ovog Provider-a  zbog bezbedonosnih zahteva.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>Provider je zahtevao asocijaciju tipa '{0}' i sesiju tipa '{1}', koje nisu međusobno kompatibilne.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>Zahtev za autentifikacijom je već kreiran korišćenjem CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>Nijedan OpenID url nije ponuđen.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>Ekstenzija sa svojstvom ovog imena ('{0}') je već registrovana.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>Ekstenzija '{0}' je već registrovana.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>Ova operacija nije podržana od strane serijalizovanih odgovora za autentifikaciju. Pokušati ovu operaciju iz LoggedIn handler-a događaja.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>Nijedan XRDS dokument koji sadrži informaciju o OpenID Relying Party krajnjoj tački nije pronadjen u {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>Nezahtevani iskaz ne može biti poslat za navedeni identifikator {0} jer ovo nije autorizovani Provider za taj identifikator.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>Maksimalno dozvoljeno vreme za kompletiranje autentifikacije je isteklo. Molimo pokušajte ponovo.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Ne može se pronaći tajna za potpisivanje od strane handle-a '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>Odgovor nije spreman.  Koristiti najpre IsResponseReady za proveru da li je odgovor spreman.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>Ovo svojstvo nije dostupno zbog nepoznate konfiguracije kanala.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.identity i openid.claimed_id parametri moraju istovremeno biti prisutna ili istovremeno odsutna u poruci.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>Svojstvo ReturnTo ne sme biti null da bi se podržala ova operacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Odbijanje nezahtevanih iskaza zahteva skladište jedinstvenih identifikatora i skladište asocijacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane ovog Relying Party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Samo OpenID-jevi izdati direktno od strane njihovog OpenID Provider-a su ovde dozvoljeni.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI podrška je onemogućena na ovom sajtu.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>Skladište asocijacija nije dato a zahtevano je za trenutnu konfiguraciju.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>Svojstvo {0} je imalo neočekivanu vrednost {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>Ni jedan identifikator nije podešen.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>Ova vrednost svojstva nije podržana od strane ove kontrole.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>Ovo je već PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Žao nam je.  Ovaj sajt jedino prihvata OpenID-jeve koji su HTTPS-bezbedni, a {0} nije bezbedni Identifier.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>Tekući HttpContext nije detektovan, tako da {0} instanca mora biti eksplicitno postavljena ili specificirana u .config fajlu.  Pozvati preklopljeni konstruktor koji uzima parametar {0}.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID provera neuspešna.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Greška u obradi XRDS dokumenta.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>XRDS dokumentu za XRI {0} nedostaje neophodni CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Ne može se pronaći XRI resolution Status tag ili je code attribute neispravan.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Core/packages.config b/src/DotNetOpenAuth.Core/packages.config
index b1c7f74..939e61f 100644
--- a/src/DotNetOpenAuth.Core/packages.config
+++ b/src/DotNetOpenAuth.Core/packages.config
@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
   <package id="LibLog" version="2.0.1" targetFramework="net45" developmentDependency="true" />
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Mvc/DotNetOpenAuth.Mvc.csproj b/src/DotNetOpenAuth.Mvc/DotNetOpenAuth.Mvc.csproj
index 16f53f4..aa986d7 100644
--- a/src/DotNetOpenAuth.Mvc/DotNetOpenAuth.Mvc.csproj
+++ b/src/DotNetOpenAuth.Mvc/DotNetOpenAuth.Mvc.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>3e3b454c</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -27,36 +28,38 @@
     <Reference Include="System.Core" />
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="System.Web" />
-    <Reference Include="System.Web.Helpers, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.Helpers.dll</HintPath>
+    <Reference Include="System.Web.Helpers">
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.Helpers.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Web.Mvc, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+    <Reference Include="System.Web.Mvc, Version=5.2.2.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.Mvc.5.0.0\lib\net45\System.Web.Mvc.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.Mvc.5.2.2\lib\net45\System.Web.Mvc.dll</HintPath>
     </Reference>
     <Reference Include="System.Web.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.Razor.3.0.0\lib\net45\System.Web.Razor.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.Razor.3.2.2\lib\net45\System.Web.Razor.dll</HintPath>
     </Reference>
     <Reference Include="System.Web.WebPages, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.WebPages.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.WebPages.dll</HintPath>
     </Reference>
     <Reference Include="System.Web.WebPages.Deployment, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.WebPages.Deployment.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.WebPages.Deployment.dll</HintPath>
     </Reference>
     <Reference Include="System.Web.WebPages.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.WebPages.Razor.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.WebPages.Razor.dll</HintPath>
     </Reference>
     <Reference Include="System.Xml.Linq" />
     <Reference Include="System.Data.DataSetExtensions" />
@@ -64,7 +67,8 @@
     <Reference Include="System.Data" />
     <Reference Include="System.Xml" />
     <Reference Include="Validation">
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -84,9 +88,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\NuGet.targets" Condition="Exists('$(SolutionDir)\.nuget\NuGet.targets')" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Mvc/packages.config b/src/DotNetOpenAuth.Mvc/packages.config
index 1d4c1ac..ed3040d 100644
--- a/src/DotNetOpenAuth.Mvc/packages.config
+++ b/src/DotNetOpenAuth.Mvc/packages.config
@@ -1,11 +1,11 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.AspNet.Mvc" version="5.0.0" targetFramework="net45" />
-  <package id="Microsoft.AspNet.Razor" version="3.0.0" targetFramework="net45" />
-  <package id="Microsoft.AspNet.WebPages" version="3.0.0" targetFramework="net45" />
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
+  <package id="Microsoft.AspNet.Mvc" version="5.2.2" targetFramework="net45" />
+  <package id="Microsoft.AspNet.Razor" version="3.2.2" targetFramework="net45" />
+  <package id="Microsoft.AspNet.WebPages" version="3.2.2" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth.Common/DotNetOpenAuth.OAuth.Common.csproj b/src/DotNetOpenAuth.OAuth.Common/DotNetOpenAuth.OAuth.Common.csproj
index cf09a0a..c1ce221 100644
--- a/src/DotNetOpenAuth.OAuth.Common/DotNetOpenAuth.OAuth.Common.csproj
+++ b/src/DotNetOpenAuth.OAuth.Common/DotNetOpenAuth.OAuth.Common.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>2daaa8d0</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -34,15 +35,17 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -52,9 +55,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth.Common/packages.config b/src/DotNetOpenAuth.OAuth.Common/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth.Common/packages.config
+++ b/src/DotNetOpenAuth.OAuth.Common/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth.Consumer/DotNetOpenAuth.OAuth.Consumer.csproj b/src/DotNetOpenAuth.OAuth.Consumer/DotNetOpenAuth.OAuth.Consumer.csproj
index 9d7d212..d719996 100644
--- a/src/DotNetOpenAuth.OAuth.Consumer/DotNetOpenAuth.OAuth.Consumer.csproj
+++ b/src/DotNetOpenAuth.OAuth.Consumer/DotNetOpenAuth.OAuth.Consumer.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>44a5a194</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -52,15 +53,13 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
-    </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -70,9 +69,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth.Consumer/packages.config b/src/DotNetOpenAuth.OAuth.Consumer/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth.Consumer/packages.config
+++ b/src/DotNetOpenAuth.OAuth.Consumer/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth.ServiceProvider/DotNetOpenAuth.OAuth.ServiceProvider.csproj b/src/DotNetOpenAuth.OAuth.ServiceProvider/DotNetOpenAuth.OAuth.ServiceProvider.csproj
index 8810f81..7b22775 100644
--- a/src/DotNetOpenAuth.OAuth.ServiceProvider/DotNetOpenAuth.OAuth.ServiceProvider.csproj
+++ b/src/DotNetOpenAuth.OAuth.ServiceProvider/DotNetOpenAuth.OAuth.ServiceProvider.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>787ed1c3</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -55,15 +56,17 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -73,9 +76,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth.ServiceProvider/packages.config b/src/DotNetOpenAuth.OAuth.ServiceProvider/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth.ServiceProvider/packages.config
+++ b/src/DotNetOpenAuth.OAuth.ServiceProvider/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth/DotNetOpenAuth.OAuth.csproj b/src/DotNetOpenAuth.OAuth/DotNetOpenAuth.OAuth.csproj
index 724daad..9069c41 100644
--- a/src/DotNetOpenAuth.OAuth/DotNetOpenAuth.OAuth.csproj
+++ b/src/DotNetOpenAuth.OAuth/DotNetOpenAuth.OAuth.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>92c8f066</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -87,25 +88,21 @@
   </ItemGroup>
   <ItemGroup>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
-    </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
-    </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.resx b/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.resx
index 34b314b..e8f2cc3 100644
--- a/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.resx
+++ b/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,107 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AccessTokenNotAuthorized" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
     <value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
   </data>
-  <data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
     <value>The access token '{0}' is invalid or expired.</value>
   </data>
-  <data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
     <value>Failure looking up secret for consumer or token.</value>
   </data>
-  <data name="IncorrectVerifier" xml:space="preserve">
+	<data name="IncorrectVerifier" xml:space="preserve">
     <value>oauth_verifier argument was incorrect.</value>
   </data>
-  <data name="InvalidIncomingMessage" xml:space="preserve">
+	<data name="InvalidIncomingMessage" xml:space="preserve">
     <value>An invalid OAuth message received and discarded.</value>
   </data>
-  <data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
     <value>The {0} message included extra data which is not allowed.</value>
   </data>
-  <data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
     <value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
   </data>
-  <data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
     <value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
   </data>
-  <data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
     <value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
   </data>
-  <data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
     <value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
   </data>
-  <data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
     <value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
   </data>
-  <data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
     <value>The signing element already has been associated with a channel.</value>
   </data>
-  <data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
     <value>All signing elements must offer the same message protection.</value>
   </data>
-  <data name="TokenNotFound" xml:space="preserve">
+	<data name="TokenNotFound" xml:space="preserve">
     <value>A token in the message was not recognized by the service provider.</value>
   </data>
-  <data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
     <value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.sr.resx b/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.sr.resx
index ef9ce60..d8a0d29 100644
--- a/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.sr.resx
+++ b/src/DotNetOpenAuth.OAuth/OAuth/OAuthStrings.sr.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,104 +59,516 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AccessTokenNotAuthorized" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
     <value>Ne može se poslati pristupni token za Consumera za token zahteva '{0}' pre nego što bude autorizovan.</value>
   </data>
-  <data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
     <value>Pristupni token '{0}' je neispravan ili je mu je istekao rok važenja.</value>
   </data>
-  <data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
     <value>Greška u traženju šifre za korisnika ili za token.</value>
   </data>
-  <data name="IncorrectVerifier" xml:space="preserve">
+	<data name="IncorrectVerifier" xml:space="preserve">
     <value>oauth_verifier argument je neispravan.</value>
   </data>
-  <data name="InvalidIncomingMessage" xml:space="preserve">
+	<data name="InvalidIncomingMessage" xml:space="preserve">
     <value>Neispravna OAuth poruka je primljena i odbačena.</value>
   </data>
-  <data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
     <value>Poruka {0} je sadržala višak podataka koji nije dozvoljen.</value>
   </data>
-  <data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
     <value>Ovaj provajder OAuth usluge zahteva od OAuth korisnika da da implementira OAuth {0}, ali izgleda da korisnika podržava jedino {1}.</value>
   </data>
-  <data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
     <value>Korišćenje OpenID+OAuth ekstenzije zahteva da token menadžer koji se koristi implementira {0} interfejs.</value>
   </data>
-  <data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
     <value>OpenID Relying Party domen nije prepoznat kao da pripada OAuth Consumeru identifikovanom po datom korisničkom tokenu.</value>
   </data>
-  <data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
     <value>URL upit zahteva NE SME sadržati bilo kakve OAuth Protocol Parametre.</value>
   </data>
-  <data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
     <value>Potpisujući element je već asociran sa kanalom.</value>
   </data>
-  <data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
     <value>Svi elementi za potpisivanje moraju nuditi istu zaštitu poruke.</value>
   </data>
-  <data name="TokenNotFound" xml:space="preserve">
+	<data name="TokenNotFound" xml:space="preserve">
     <value>Token u poruci nije prepoznat od strane provajdera usluge.</value>
   </data>
-  <data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
     <value>RSA-SHA1 potpisujući povezujući element nije podešen sa sertifikatom za potpisivanje.</value>
   </data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>Nijedan PPID provajder nije konfigurisan.</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Svojstvo {0}.{1} argumenta je neophodno, ali je ono prazno ili nepostojeće.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current je nepostojeći.  Mora postojati ASP.NET zahtev u procesu da bi ova operacija bila uspešna.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0}.  Da li nedostaje [DataContract] atribut?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0} jer svojstvo DataContractAttribute.Namespace property nije podešeno.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>Instanca tipa {0} je bila očekivana, a primljena je neočekivana izvedena instanca tipa {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>Svojstvo Recipient usmerene poruke ne sme biti nepostojeće.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>Dati set opcija nije podržan od strane.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Greška prilikom deserijalizacije poruke {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Greška se desila tokom slanja usmerene poruke ili tokom primanja odgovora.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>Ovaj izuzetak nije napravljen sa početnom porukom koja ga je izazvala.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} a primljena poruka nije prepoznata.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>Poruka ističe u {0} a sada je {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>Bar jedan od GET ili POST flegova mora biti prisutan.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>Ovaj metod zahteva tekući HttpContext. Kao alternativa, koristite preklopljeni metod koji dozvoljava da se prosledi informacija bez HttpContext-a.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Poruke koje ukazuju na indirektni transport moraju implementirati {0} interfejs.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Nebezbedan web zahtev za '{0}' prekinut zbog bezbednosnih zahteva koji zahtevaju HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>Poruka {0} je zahtevala zaštite {{{1}}} ali prenosni kanal nije mogao primeniti {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>Redosled prilagođenih vezujućih elemenata je neispravan.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Neki deo ili delovi poruke imaju nevalidne vrednosti: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>Primljena poruka imala je neispravan ili nedostajući jedinstveni identifikator.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>Element sa istom vrednošću ključa je već dodat.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>Poruka {0} ne podržava ekstenzije.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>Vrednost za {0}.{1} člana {1} je trebala da bude izvedena od  {2} ali je izvedena od {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Greška prilikom čitanja poruke '{0}' parametar '{1}' sa vrednošću '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Parametar poruke '{0}' sa vrednošću '{1}' nije se base64-dekodovao.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Greška prilikom pripremanja poruke '{0}' parametra '{1}' za slanje.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>Poruka-odgovor je već u redu za slanje u stream-u za odgovore.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>Ova poruka je već obrađena.  Ovo može ukazivati na replay napad u toku.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava replay zaštitu.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>Sledeći zahtevani parametri koji ne smeju biti prazni su bili prazni u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>Sledeći zahtevani parametri nedostaju u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>Povezujući element koji nudi {0} zaštitu zahteva drugu zaštitu koja nije ponuđena.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>Lista je prazna.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>Lista sadrži prazan (null) element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Potpis poruke je neispravan.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava potpisivanje poruka. Da bi podržao potpisivanje poruka, izvedeni tip Channel mora preklopiti Sign i IsSignatureValid metode.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>Svojstvo stream-a CanRead je vratilo false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>Svojstvo stream-a CanWrite je vratilo false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Očekivano je da najviše 1 povezujući element primeni zaštitu {0}, ali je više njih primenjeno.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>Maksimalno dozvoljeni broj redirekcija je prekoračen u toku zahtevanja '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>Niz ne sme biti prazan.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>Prazan string nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Parametar poruke '{0}' ima neočekivanu '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Očekivano je da od poruke {0} parametar '{1}' ima vrednost '{2}' ali je imao vrednost '{3}'.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} ali je umesto nje primljena {1}.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Poruka neočekivanog tipa je primljena.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>null ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>null ili prazan ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>null vrednost je uključena za ključ '{0}' a nije dozvoljena.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>Tip {0} ili izvedeni tip je očekivan, a dat je {1}.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} svojstvo ima nepoznatu vrednost {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>URL '{0}' je rangiran kao nebezbedan i ne može se zahtevati na ovaj način.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirekcije na POST zahteve usmerene ka serverima kojima se ne veruje nisu podržane.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web zahtev za '{0}' nije uspeo.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>Ovaj izuzetak mora se kreirati zajedno sa primaocem koji će primiti poruku o grešci ili sa instancom poruke direktnog zahteva na koju će ovaj izuzetak odgovoriti.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' poruka ne može biti primljeno sa HTTP glagolom '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Neočekivani HTTP statusni kod {0} {1} primljen u direktnom odgovoru.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>HTTP glagol '{0}' je neprepoznat i nije podržan.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>Absolutni URI je zahtevan za ovu vrednost.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>Dužina deljene tajne ({0}) ne slaže se sa dužinom zahtevanom od povezujućeg tipa ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>Dužina šifrovane deljene tajne ({0}) ne slaže se sa dužinom hashing algoritma ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>Ako je dato povezujuće skladište, jedinstveni identifikator skladišta takođe mora biti prisutan.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>Dostavljeni privatni podaci ne slažu se ni sa jednim poznatim Association tipom.  Dužina im je možda prekratka ili su podaci neispravni.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback argumenti su podržani jedino kada je {0} dustupan za {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>Simple Registration zahtev može generisati odgovor jedino na prijemnoj strani.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.claimed_id i openid.identity parametri moraju istovremeno biti prisutni ili nedostajati.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo ne može se podesiti kada IsDelegatedIdentifier ima vrednost true da bi se izbeglo narušavanje OpenID URL delegiranja.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo se najpre mora podesiti.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>Sledeća svojstva moraju biti podešena pre nego što Diffie-Hellmanov algoritam može generisati javni ključ: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI nije SSL a svojstvo requireSslDiscovery je podešeno na true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>Prostor deljenja proširenja '{0}' je već dodat. Samo jedno proširenje po prostoru je dozvoljeno u datom zahtevu.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Ne može se tražiti podrška za proširenja na rehidriranom ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Segmenti fragmenta se ne primenjuju na XRI identifikatore.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier i LocalIdentifier moraju biti isti kada IsIdentifierSelect ima vrednost true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Kontakt: {1}, Referenca: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Ne može se enkodovati '{0}' jer sadrži nevalidan znak za Key-Value Form enkodiranje.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Ne može se dekodovati Key-Value Form jer je pronađena linija bez  '{0}' znaka.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>Šema mora biti http ili https a bila je '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>Vrednost '{0}' nije validan URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Nije prepoznat XRI format'.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>OpenID Provider dao je iskaz za Identifier čije se informacije o pronalaženju ne slažu. 
+Informacije o krajnoj tački iskaza: 
+{0}
+Informacije o otkrivenoj krajnjoj tački:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>Lista ključeva se ne slaže sa ponuđenim rečnikom.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>Parametri '{0}' i '{1}' moraju oba biti ili ne smeju oba biti '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanom dužinom {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanim imenom '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Osim ako se ne koristi enkripcija transportnog sloja, "no-encryption" NE SME biti korišćen.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman sesija tipa '{0}' nije pronađena za OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>Nijedna OpenID krajnja tačka nije pronađena.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>Ova operacija je jedino dozvoljena kada je IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Nije moguće utvrditi verziju OpenID protokola implementiranog od strane Provider-a na krajnjoj tački '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>HTTP zahtev ka URL-u domena ({0}) rezultovao je redirekcijom, koja nije dozvoljena u togu pronalaženja Relying Party.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' nije unutar domena '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>{0} parametar ({1}) se ne slaže sa trenutnim URL ({2}) sa kojim je zahtev napravljen.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>openid.return_to parametar je neophodan u poruci zahteva da bi se konstruisao odgovor, ali ovaj parametar nedostaje.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>Sledeći parametri nisu uključeni u potpis a moraju da budu: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Neispravna vrednost za datum rođenja.  Mora biti u formi gggg-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>Tip mora implementirati {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>openid.user_setup_url parametar je neophodan prilikom slanja negativnih poruka sa iskazima prilikom odgovaranja na zahteve u trenutnom modu.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI razrešivanje neuspešno.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>Atribut sa URI tipom '{0}' je već dodat.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Samo {0} vrednosti za atribut '{1}' su zahtevane, ali {2} su ponuđene.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Prosleđivanje objekta tipa DateTime čije svojstvo Kind ima vrednost Unspecified nije dozvoljeno.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>Zahtevani tip asocijacije '{0}' sa sesijom tipa '{1}' nije prepoznat ili nije podržan od strane ovog Provider-a  zbog bezbedonosnih zahteva.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>Provider je zahtevao asocijaciju tipa '{0}' i sesiju tipa '{1}', koje nisu međusobno kompatibilne.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>Zahtev za autentifikacijom je već kreiran korišćenjem CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>Nijedan OpenID url nije ponuđen.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>Ekstenzija sa svojstvom ovog imena ('{0}') je već registrovana.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>Ekstenzija '{0}' je već registrovana.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>Ova operacija nije podržana od strane serijalizovanih odgovora za autentifikaciju. Pokušati ovu operaciju iz LoggedIn handler-a događaja.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>Nijedan XRDS dokument koji sadrži informaciju o OpenID Relying Party krajnjoj tački nije pronadjen u {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>Nezahtevani iskaz ne može biti poslat za navedeni identifikator {0} jer ovo nije autorizovani Provider za taj identifikator.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>Maksimalno dozvoljeno vreme za kompletiranje autentifikacije je isteklo. Molimo pokušajte ponovo.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Ne može se pronaći tajna za potpisivanje od strane handle-a '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>Odgovor nije spreman.  Koristiti najpre IsResponseReady za proveru da li je odgovor spreman.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>Ovo svojstvo nije dostupno zbog nepoznate konfiguracije kanala.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.identity i openid.claimed_id parametri moraju istovremeno biti prisutna ili istovremeno odsutna u poruci.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>Svojstvo ReturnTo ne sme biti null da bi se podržala ova operacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Odbijanje nezahtevanih iskaza zahteva skladište jedinstvenih identifikatora i skladište asocijacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane ovog Relying Party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Samo OpenID-jevi izdati direktno od strane njihovog OpenID Provider-a su ovde dozvoljeni.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI podrška je onemogućena na ovom sajtu.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>Skladište asocijacija nije dato a zahtevano je za trenutnu konfiguraciju.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>Svojstvo {0} je imalo neočekivanu vrednost {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>Ni jedan identifikator nije podešen.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>Ova vrednost svojstva nije podržana od strane ove kontrole.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>Ovo je već PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Žao nam je.  Ovaj sajt jedino prihvata OpenID-jeve koji su HTTPS-bezbedni, a {0} nije bezbedni Identifier.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>Tekući HttpContext nije detektovan, tako da {0} instanca mora biti eksplicitno postavljena ili specificirana u .config fajlu.  Pozvati preklopljeni konstruktor koji uzima parametar {0}.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>Konfiguraciono zavisni tip {0} mora biti javan, a on to nije.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>Konfiguraciona XAML referenca na {0} zahteva da se trenutni HttpContext razreši.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID provera neuspešna.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Greška u obradi XRDS dokumenta.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>XRDS dokumentu za XRI {0} nedostaje neophodni CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Ne može se pronaći XRI resolution Status tag ili je code attribute neispravan.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth/packages.config b/src/DotNetOpenAuth.OAuth/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth/packages.config
+++ b/src/DotNetOpenAuth.OAuth/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.AuthorizationServer/DotNetOpenAuth.OAuth2.AuthorizationServer.csproj b/src/DotNetOpenAuth.OAuth2.AuthorizationServer/DotNetOpenAuth.OAuth2.AuthorizationServer.csproj
index f7a577a..884ba85 100644
--- a/src/DotNetOpenAuth.OAuth2.AuthorizationServer/DotNetOpenAuth.OAuth2.AuthorizationServer.csproj
+++ b/src/DotNetOpenAuth.OAuth2.AuthorizationServer/DotNetOpenAuth.OAuth2.AuthorizationServer.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>1c99e40f</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -74,15 +75,17 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -92,9 +95,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.AuthorizationServer/OAuth2/AuthServerStrings.resx b/src/DotNetOpenAuth.OAuth2.AuthorizationServer/OAuth2/AuthServerStrings.resx
index 8aaa567..83677ed 100644
--- a/src/DotNetOpenAuth.OAuth2.AuthorizationServer/OAuth2/AuthServerStrings.resx
+++ b/src/DotNetOpenAuth.OAuth2.AuthorizationServer/OAuth2/AuthServerStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,83 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
     <value>The requested access scope exceeds the grant scope.</value>
   </data>
-  <data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
     <value>The access token's private signing key must be set.</value>
   </data>
-  <data name="ClientCallbackDisallowed" xml:space="preserve">
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
     <value>The callback URL ({0}) is not allowed for this client.</value>
   </data>
-  <data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
     <value>Failure looking up secret for client or token.</value>
   </data>
-  <data name="ClientSecretMismatch" xml:space="preserve">
+	<data name="ClientSecretMismatch" xml:space="preserve">
     <value>The client secret was incorrect.</value>
   </data>
-  <data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
     <value>Invalid resource owner password credential.</value>
   </data>
-  <data name="NoCallback" xml:space="preserve">
+	<data name="NoCallback" xml:space="preserve">
     <value>No callback URI was available for this request.</value>
   </data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.AuthorizationServer/packages.config b/src/DotNetOpenAuth.OAuth2.AuthorizationServer/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth2.AuthorizationServer/packages.config
+++ b/src/DotNetOpenAuth.OAuth2.AuthorizationServer/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.Client.UI/DotNetOpenAuth.OAuth2.Client.UI.csproj b/src/DotNetOpenAuth.OAuth2.Client.UI/DotNetOpenAuth.OAuth2.Client.UI.csproj
index 508b5a5..faf9282 100644
--- a/src/DotNetOpenAuth.OAuth2.Client.UI/DotNetOpenAuth.OAuth2.Client.UI.csproj
+++ b/src/DotNetOpenAuth.OAuth2.Client.UI/DotNetOpenAuth.OAuth2.Client.UI.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>5666c373</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -49,18 +50,18 @@
   </ItemGroup>
   <ItemGroup>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions, Version=2.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+    <Reference Include="System.Net.Http.Extensions">
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives, Version=4.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives">
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -70,9 +71,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.Client.UI/OAuth2/ClientAuthorizationView.resx b/src/DotNetOpenAuth.OAuth2.Client.UI/OAuth2/ClientAuthorizationView.resx
index 7080a7d..891c62b 100644
--- a/src/DotNetOpenAuth.OAuth2.Client.UI/OAuth2/ClientAuthorizationView.resx
+++ b/src/DotNetOpenAuth.OAuth2.Client.UI/OAuth2/ClientAuthorizationView.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,62 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.Client.UI/packages.config b/src/DotNetOpenAuth.OAuth2.Client.UI/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth2.Client.UI/packages.config
+++ b/src/DotNetOpenAuth.OAuth2.Client.UI/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.Client/DotNetOpenAuth.OAuth2.Client.csproj b/src/DotNetOpenAuth.OAuth2.Client/DotNetOpenAuth.OAuth2.Client.csproj
index 1d4693f..629e68e 100644
--- a/src/DotNetOpenAuth.OAuth2.Client/DotNetOpenAuth.OAuth2.Client.csproj
+++ b/src/DotNetOpenAuth.OAuth2.Client/DotNetOpenAuth.OAuth2.Client.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>9feb4147</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -67,23 +68,14 @@
       <Private>True</Private>
       <HintPath>..\packages\Microsoft.Web.Infrastructure.1.0.0.0\lib\net40\Microsoft.Web.Infrastructure.dll</HintPath>
     </Reference>
-    <Reference Include="Newtonsoft.Json, Version=4.5.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
-      <HintPath>..\packages\Newtonsoft.Json.5.0.8\lib\net45\Newtonsoft.Json.dll</HintPath>
-    </Reference>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions, Version=2.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
-    </Reference>
-    <Reference Include="System.Net.Http.Formatting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL" />
-    <Reference Include="System.Net.Http.Primitives, Version=4.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Formatting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -93,9 +85,4 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
-  </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.Client/OAuth2/ClientStrings.resx b/src/DotNetOpenAuth.OAuth2.Client/OAuth2/ClientStrings.resx
index 5facbc4..c433348 100644
--- a/src/DotNetOpenAuth.OAuth2.Client/OAuth2/ClientStrings.resx
+++ b/src/DotNetOpenAuth.OAuth2.Client/OAuth2/ClientStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,78 +59,739 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AccessTokenRefreshFailed" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
     <value>Access token has expired and cannot be automatically refreshed.</value>
   </data>
-  <data name="AuthorizationExpired" xml:space="preserve">
+	<data name="AuthorizationExpired" xml:space="preserve">
     <value>Authorization has expired.</value>
   </data>
-  <data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
     <value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
     <comment>The error message generated when detecting a mismatch between the state sent to the authorization server originally and what we got back with successful authorization, or that the user sessions were not identical between the two requests, suggesting XSRF or other attack on the user (victim).</comment>
   </data>
-  <data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
     <value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
   </data>
-  <data name="UnexpectedResponseContentType" xml:space="preserve">
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
     <value>Unexpected response Content-Type {0}</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.Client/packages.config b/src/DotNetOpenAuth.OAuth2.Client/packages.config
index b1c5066..3687166 100644
--- a/src/DotNetOpenAuth.OAuth2.Client/packages.config
+++ b/src/DotNetOpenAuth.OAuth2.Client/packages.config
@@ -1,10 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.AspNet.WebApi.Client" version="5.0.0" targetFramework="net45" />
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net45" />
-  <package id="Newtonsoft.Json" version="5.0.8" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/DotNetOpenAuth.OAuth2.ClientAuthorization.csproj b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/DotNetOpenAuth.OAuth2.ClientAuthorization.csproj
index ce9cd3b..28aa15f 100644
--- a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/DotNetOpenAuth.OAuth2.ClientAuthorization.csproj
+++ b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/DotNetOpenAuth.OAuth2.ClientAuthorization.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>6c8e1db4</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -80,25 +81,29 @@
   </ItemGroup>
   <ItemGroup>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+    <Reference Include="System.Net.Http.Extensions, Version=2.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
     </Reference>
   </ItemGroup>
   <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/ClientAuthorizationStrings.resx b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/ClientAuthorizationStrings.resx
index da2dd73..1cc862d 100644
--- a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/ClientAuthorizationStrings.resx
+++ b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/OAuth2/ClientAuthorizationStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,68 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
     <value>The request message type {0} should not be responded to with a refresh token.</value>
   </data>
-  <data name="TokenEndpointErrorFormat" xml:space="preserve">
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
     <value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/packages.config b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OAuth2.ClientAuthorization/packages.config
+++ b/src/DotNetOpenAuth.OAuth2.ClientAuthorization/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.ResourceServer/DotNetOpenAuth.OAuth2.ResourceServer.csproj b/src/DotNetOpenAuth.OAuth2.ResourceServer/DotNetOpenAuth.OAuth2.ResourceServer.csproj
index 4597f88..4d8abbc 100644
--- a/src/DotNetOpenAuth.OAuth2.ResourceServer/DotNetOpenAuth.OAuth2.ResourceServer.csproj
+++ b/src/DotNetOpenAuth.OAuth2.ResourceServer/DotNetOpenAuth.OAuth2.ResourceServer.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>a325f086</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -54,15 +55,17 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -72,9 +75,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/ResourceServerStrings.resx b/src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/ResourceServerStrings.resx
index 46943c4..f08ec3b 100644
--- a/src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/ResourceServerStrings.resx
+++ b/src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/ResourceServerStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,74 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
     <value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
   </data>
-  <data name="InvalidAccessToken" xml:space="preserve">
+	<data name="InvalidAccessToken" xml:space="preserve">
     <value>Invalid access token.</value>
   </data>
-  <data name="MissingAccessToken" xml:space="preserve">
+	<data name="MissingAccessToken" xml:space="preserve">
     <value>Missing access token.</value>
   </data>
-  <data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
     <value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2.ResourceServer/packages.config b/src/DotNetOpenAuth.OAuth2.ResourceServer/packages.config
index 91bca73..55bfa4d 100644
--- a/src/DotNetOpenAuth.OAuth2.ResourceServer/packages.config
+++ b/src/DotNetOpenAuth.OAuth2.ResourceServer/packages.config
@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
   <package id="Microsoft.IdentityModel" version="6.1.7600.16394" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2/DotNetOpenAuth.OAuth2.csproj b/src/DotNetOpenAuth.OAuth2/DotNetOpenAuth.OAuth2.csproj
index 623280d..5433836 100644
--- a/src/DotNetOpenAuth.OAuth2/DotNetOpenAuth.OAuth2.csproj
+++ b/src/DotNetOpenAuth.OAuth2/DotNetOpenAuth.OAuth2.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>2f15649b</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -44,7 +45,9 @@
   </ItemGroup>
   <ItemGroup>
     <None Include="OAuth2\OAuth 2 client facades.cd" />
-    <None Include="packages.config" />
+    <None Include="packages.config">
+      <SubType>Designer</SubType>
+    </None>
   </ItemGroup>
   <ItemGroup>
     <EmbeddedResource Include="OAuth2\OAuthStrings.resx">
@@ -60,25 +63,21 @@
   </ItemGroup>
   <ItemGroup>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
-    </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
-    </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
     </Reference>
   </ItemGroup>
   <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2/OAuth2/OAuthStrings.resx b/src/DotNetOpenAuth.OAuth2/OAuth2/OAuthStrings.resx
index 4298af6..8894083 100644
--- a/src/DotNetOpenAuth.OAuth2/OAuth2/OAuthStrings.resx
+++ b/src/DotNetOpenAuth.OAuth2/OAuth2/OAuthStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,89 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AbsoluteUriRequired" xml:space="preserve">
-    <value>The value for message part "{0}" must be an absolute URI.</value>
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+    <value>An absolute URI is required for this value.</value>
   </data>
-  <data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
     <value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
   </data>
-  <data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
     <value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
   </data>
-  <data name="HttpsRequired" xml:space="preserve">
+	<data name="HttpsRequired" xml:space="preserve">
     <value>This message can only be sent over HTTPS.</value>
   </data>
-  <data name="InvalidScopeToken" xml:space="preserve">
+	<data name="InvalidScopeToken" xml:space="preserve">
     <value>The scope token "{0}" contains illegal characters or is empty.</value>
   </data>
-  <data name="NoGrantNoRefreshToken" xml:space="preserve">
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
     <value>Refresh tokens should not be granted without the request including an access grant.</value>
   </data>
-  <data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
     <value>The '{0}' parameter contains the illegal character '{1}'.</value>
   </data>
-  <data name="ResultShouldNotBeNull" xml:space="preserve">
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
     <value>The return value of {0}.{1} should never be null.</value>
   </data>
-  <data name="ScopesMayNotContainSpaces" xml:space="preserve">
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
     <value>Individual scopes may not contain spaces.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OAuth2/packages.config b/src/DotNetOpenAuth.OAuth2/packages.config
index d7c8c89..a9eada0 100644
--- a/src/DotNetOpenAuth.OAuth2/packages.config
+++ b/src/DotNetOpenAuth.OAuth2/packages.config
@@ -1,7 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.Provider.UI/DotNetOpenAuth.OpenId.Provider.UI.csproj b/src/DotNetOpenAuth.OpenId.Provider.UI/DotNetOpenAuth.OpenId.Provider.UI.csproj
index 79046bb..31c632b 100644
--- a/src/DotNetOpenAuth.OpenId.Provider.UI/DotNetOpenAuth.OpenId.Provider.UI.csproj
+++ b/src/DotNetOpenAuth.OpenId.Provider.UI/DotNetOpenAuth.OpenId.Provider.UI.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>7e795d12</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -53,16 +54,18 @@
   <ItemGroup>
     <Reference Include="System" />
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+    <Reference Include="System.Net.Http.Extensions, Version=2.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -72,9 +75,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.Provider.UI/packages.config b/src/DotNetOpenAuth.OpenId.Provider.UI/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OpenId.Provider.UI/packages.config
+++ b/src/DotNetOpenAuth.OpenId.Provider.UI/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.Provider/DotNetOpenAuth.OpenId.Provider.csproj b/src/DotNetOpenAuth.OpenId.Provider/DotNetOpenAuth.OpenId.Provider.csproj
index f721d4a..26230ca 100644
--- a/src/DotNetOpenAuth.OpenId.Provider/DotNetOpenAuth.OpenId.Provider.csproj
+++ b/src/DotNetOpenAuth.OpenId.Provider/DotNetOpenAuth.OpenId.Provider.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>d85343d9</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -74,15 +75,17 @@
     <Reference Include="System" />
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -95,9 +98,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.Provider/packages.config b/src/DotNetOpenAuth.OpenId.Provider/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OpenId.Provider/packages.config
+++ b/src/DotNetOpenAuth.OpenId.Provider/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.RelyingParty.UI/DotNetOpenAuth.OpenId.RelyingParty.UI.csproj b/src/DotNetOpenAuth.OpenId.RelyingParty.UI/DotNetOpenAuth.OpenId.RelyingParty.UI.csproj
index 1e1d50c..aafe301 100644
--- a/src/DotNetOpenAuth.OpenId.RelyingParty.UI/DotNetOpenAuth.OpenId.RelyingParty.UI.csproj
+++ b/src/DotNetOpenAuth.OpenId.RelyingParty.UI/DotNetOpenAuth.OpenId.RelyingParty.UI.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>bda0f855</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -68,40 +69,42 @@
     </Reference>
     <Reference Include="System" />
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+    <Reference Include="System.Net.Http.Extensions, Version=2.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="System.Web.Helpers, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.Helpers.dll</HintPath>
+    <Reference Include="System.Web.Helpers">
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.Helpers.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Web.Mvc, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.Mvc.5.0.0\lib\net45\System.Web.Mvc.dll</HintPath>
+    <Reference Include="System.Web.Mvc">
+      <HintPath>..\packages\Microsoft.AspNet.Mvc.5.2.2\lib\net45\System.Web.Mvc.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Web.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.Razor.3.0.0\lib\net45\System.Web.Razor.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.Razor.3.2.2\lib\net45\System.Web.Razor.dll</HintPath>
     </Reference>
-    <Reference Include="System.Web.WebPages, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.WebPages.dll</HintPath>
+    <Reference Include="System.Web.WebPages">
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.WebPages.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Web.WebPages.Deployment, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.WebPages.Deployment.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.WebPages.Deployment.dll</HintPath>
     </Reference>
     <Reference Include="System.Web.WebPages.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.0.0\lib\net45\System.Web.WebPages.Razor.dll</HintPath>
+      <HintPath>..\packages\Microsoft.AspNet.WebPages.3.2.2\lib\net45\System.Web.WebPages.Razor.dll</HintPath>
     </Reference>
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -125,9 +128,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.RelyingParty.UI/packages.config b/src/DotNetOpenAuth.OpenId.RelyingParty.UI/packages.config
index 1d4c1ac..ed3040d 100644
--- a/src/DotNetOpenAuth.OpenId.RelyingParty.UI/packages.config
+++ b/src/DotNetOpenAuth.OpenId.RelyingParty.UI/packages.config
@@ -1,11 +1,11 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.AspNet.Mvc" version="5.0.0" targetFramework="net45" />
-  <package id="Microsoft.AspNet.Razor" version="3.0.0" targetFramework="net45" />
-  <package id="Microsoft.AspNet.WebPages" version="3.0.0" targetFramework="net45" />
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
+  <package id="Microsoft.AspNet.Mvc" version="5.2.2" targetFramework="net45" />
+  <package id="Microsoft.AspNet.Razor" version="3.2.2" targetFramework="net45" />
+  <package id="Microsoft.AspNet.WebPages" version="3.2.2" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.RelyingParty/DotNetOpenAuth.OpenId.RelyingParty.csproj b/src/DotNetOpenAuth.OpenId.RelyingParty/DotNetOpenAuth.OpenId.RelyingParty.csproj
index 994fb4e..abb86bc 100644
--- a/src/DotNetOpenAuth.OpenId.RelyingParty/DotNetOpenAuth.OpenId.RelyingParty.csproj
+++ b/src/DotNetOpenAuth.OpenId.RelyingParty/DotNetOpenAuth.OpenId.RelyingParty.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>6fc98339</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -76,15 +77,17 @@
     <Reference Include="System" />
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -95,9 +98,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.RelyingParty/packages.config b/src/DotNetOpenAuth.OpenId.RelyingParty/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OpenId.RelyingParty/packages.config
+++ b/src/DotNetOpenAuth.OpenId.RelyingParty/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.UI/DotNetOpenAuth.OpenId.UI.csproj b/src/DotNetOpenAuth.OpenId.UI/DotNetOpenAuth.OpenId.UI.csproj
index 733ef92..2f03029 100644
--- a/src/DotNetOpenAuth.OpenId.UI/DotNetOpenAuth.OpenId.UI.csproj
+++ b/src/DotNetOpenAuth.OpenId.UI/DotNetOpenAuth.OpenId.UI.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>7b897ca3</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -40,18 +41,18 @@
   </ItemGroup>
   <ItemGroup>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions, Version=2.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+    <Reference Include="System.Net.Http.Extensions, Version=2.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives, Version=4.2.15.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -61,9 +62,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId.UI/packages.config b/src/DotNetOpenAuth.OpenId.UI/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OpenId.UI/packages.config
+++ b/src/DotNetOpenAuth.OpenId.UI/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/DotNetOpenAuth.OpenId.csproj b/src/DotNetOpenAuth.OpenId/DotNetOpenAuth.OpenId.csproj
index 4777f3e..69c0f56 100644
--- a/src/DotNetOpenAuth.OpenId/DotNetOpenAuth.OpenId.csproj
+++ b/src/DotNetOpenAuth.OpenId/DotNetOpenAuth.OpenId.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>24cfc7dd</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -186,15 +187,17 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
-    <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+    <Reference Include="Validation">
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
+      <Private>True</Private>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -204,9 +207,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.resx b/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.resx
index a8bf2d6..e6febc3 100644
--- a/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.resx
+++ b/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,83 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
     <value>The PAPE request has an incomplete set of authentication policies.</value>
   </data>
-  <data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
     <value>A PAPE response is missing or is missing required policies.</value>
   </data>
-  <data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
     <value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
   </data>
-  <data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
     <value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
   </data>
-  <data name="PpidProviderNotGiven" xml:space="preserve">
+	<data name="PpidProviderNotGiven" xml:space="preserve">
     <value>No PPID provider has been configured.</value>
   </data>
-  <data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
     <value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
   </data>
-  <data name="RealmMustBeHttps" xml:space="preserve">
+	<data name="RealmMustBeHttps" xml:space="preserve">
     <value>The Realm in an authentication request must be an HTTPS URL.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.sr.resx b/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.sr.resx
index 2b1b911..3289ccf 100644
--- a/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.sr.resx
+++ b/src/DotNetOpenAuth.OpenId/OpenId/Behaviors/BehaviorStrings.sr.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,65 +59,516 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="PpidProviderNotGiven" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
     <value>Nijedan PPID provajder nije konfigurisan.</value>
   </data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Svojstvo {0}.{1} argumenta je neophodno, ali je ono prazno ili nepostojeće.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current je nepostojeći.  Mora postojati ASP.NET zahtev u procesu da bi ova operacija bila uspešna.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0}.  Da li nedostaje [DataContract] atribut?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0} jer svojstvo DataContractAttribute.Namespace property nije podešeno.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>Instanca tipa {0} je bila očekivana, a primljena je neočekivana izvedena instanca tipa {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>Svojstvo Recipient usmerene poruke ne sme biti nepostojeće.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>Dati set opcija nije podržan od strane.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Greška prilikom deserijalizacije poruke {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Greška se desila tokom slanja usmerene poruke ili tokom primanja odgovora.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>Ovaj izuzetak nije napravljen sa početnom porukom koja ga je izazvala.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} a primljena poruka nije prepoznata.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>Poruka ističe u {0} a sada je {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>Bar jedan od GET ili POST flegova mora biti prisutan.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>Ovaj metod zahteva tekući HttpContext. Kao alternativa, koristite preklopljeni metod koji dozvoljava da se prosledi informacija bez HttpContext-a.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Poruke koje ukazuju na indirektni transport moraju implementirati {0} interfejs.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Nebezbedan web zahtev za '{0}' prekinut zbog bezbednosnih zahteva koji zahtevaju HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>Poruka {0} je zahtevala zaštite {{{1}}} ali prenosni kanal nije mogao primeniti {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>Redosled prilagođenih vezujućih elemenata je neispravan.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Neki deo ili delovi poruke imaju nevalidne vrednosti: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>Primljena poruka imala je neispravan ili nedostajući jedinstveni identifikator.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>Element sa istom vrednošću ključa je već dodat.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>Poruka {0} ne podržava ekstenzije.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>Vrednost za {0}.{1} člana {1} je trebala da bude izvedena od  {2} ali je izvedena od {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Greška prilikom čitanja poruke '{0}' parametar '{1}' sa vrednošću '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Parametar poruke '{0}' sa vrednošću '{1}' nije se base64-dekodovao.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Greška prilikom pripremanja poruke '{0}' parametra '{1}' za slanje.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>Poruka-odgovor je već u redu za slanje u stream-u za odgovore.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>Ova poruka je već obrađena.  Ovo može ukazivati na replay napad u toku.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava replay zaštitu.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>Sledeći zahtevani parametri koji ne smeju biti prazni su bili prazni u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>Sledeći zahtevani parametri nedostaju u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>Povezujući element koji nudi {0} zaštitu zahteva drugu zaštitu koja nije ponuđena.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>Lista je prazna.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>Lista sadrži prazan (null) element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Potpis poruke je neispravan.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava potpisivanje poruka. Da bi podržao potpisivanje poruka, izvedeni tip Channel mora preklopiti Sign i IsSignatureValid metode.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>Svojstvo stream-a CanRead je vratilo false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>Svojstvo stream-a CanWrite je vratilo false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Očekivano je da najviše 1 povezujući element primeni zaštitu {0}, ali je više njih primenjeno.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>Maksimalno dozvoljeni broj redirekcija je prekoračen u toku zahtevanja '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>Niz ne sme biti prazan.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>Prazan string nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Parametar poruke '{0}' ima neočekivanu '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Očekivano je da od poruke {0} parametar '{1}' ima vrednost '{2}' ali je imao vrednost '{3}'.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} ali je umesto nje primljena {1}.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Poruka neočekivanog tipa je primljena.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>null ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>null ili prazan ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>null vrednost je uključena za ključ '{0}' a nije dozvoljena.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>Tip {0} ili izvedeni tip je očekivan, a dat je {1}.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} svojstvo ima nepoznatu vrednost {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>URL '{0}' je rangiran kao nebezbedan i ne može se zahtevati na ovaj način.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirekcije na POST zahteve usmerene ka serverima kojima se ne veruje nisu podržane.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web zahtev za '{0}' nije uspeo.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>Ovaj izuzetak mora se kreirati zajedno sa primaocem koji će primiti poruku o grešci ili sa instancom poruke direktnog zahteva na koju će ovaj izuzetak odgovoriti.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' poruka ne može biti primljeno sa HTTP glagolom '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Neočekivani HTTP statusni kod {0} {1} primljen u direktnom odgovoru.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>HTTP glagol '{0}' je neprepoznat i nije podržan.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Ne može se poslati pristupni token za Consumera za token zahteva '{0}' pre nego što bude autorizovan.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>Pristupni token '{0}' je neispravan ili je mu je istekao rok važenja.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Greška u traženju šifre za korisnika ili za token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument je neispravan.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>Neispravna OAuth poruka je primljena i odbačena.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>Poruka {0} je sadržala višak podataka koji nije dozvoljen.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>Ovaj provajder OAuth usluge zahteva od OAuth korisnika da da implementira OAuth {0}, ali izgleda da korisnika podržava jedino {1}.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Korišćenje OpenID+OAuth ekstenzije zahteva da token menadžer koji se koristi implementira {0} interfejs.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>OpenID Relying Party domen nije prepoznat kao da pripada OAuth Consumeru identifikovanom po datom korisničkom tokenu.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>URL upit zahteva NE SME sadržati bilo kakve OAuth Protocol Parametre.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>Potpisujući element je već asociran sa kanalom.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>Svi elementi za potpisivanje moraju nuditi istu zaštitu poruke.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>Token u poruci nije prepoznat od strane provajdera usluge.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>RSA-SHA1 potpisujući povezujući element nije podešen sa sertifikatom za potpisivanje.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>Absolutni URI je zahtevan za ovu vrednost.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>Dužina deljene tajne ({0}) ne slaže se sa dužinom zahtevanom od povezujućeg tipa ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>Dužina šifrovane deljene tajne ({0}) ne slaže se sa dužinom hashing algoritma ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>Ako je dato povezujuće skladište, jedinstveni identifikator skladišta takođe mora biti prisutan.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>Dostavljeni privatni podaci ne slažu se ni sa jednim poznatim Association tipom.  Dužina im je možda prekratka ili su podaci neispravni.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback argumenti su podržani jedino kada je {0} dustupan za {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>Simple Registration zahtev može generisati odgovor jedino na prijemnoj strani.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.claimed_id i openid.identity parametri moraju istovremeno biti prisutni ili nedostajati.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo ne može se podesiti kada IsDelegatedIdentifier ima vrednost true da bi se izbeglo narušavanje OpenID URL delegiranja.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo se najpre mora podesiti.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>Sledeća svojstva moraju biti podešena pre nego što Diffie-Hellmanov algoritam može generisati javni ključ: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI nije SSL a svojstvo requireSslDiscovery je podešeno na true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>Prostor deljenja proširenja '{0}' je već dodat. Samo jedno proširenje po prostoru je dozvoljeno u datom zahtevu.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Ne može se tražiti podrška za proširenja na rehidriranom ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Segmenti fragmenta se ne primenjuju na XRI identifikatore.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier i LocalIdentifier moraju biti isti kada IsIdentifierSelect ima vrednost true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Kontakt: {1}, Referenca: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Ne može se enkodovati '{0}' jer sadrži nevalidan znak za Key-Value Form enkodiranje.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Ne može se dekodovati Key-Value Form jer je pronađena linija bez  '{0}' znaka.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>Šema mora biti http ili https a bila je '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>Vrednost '{0}' nije validan URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Nije prepoznat XRI format'.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>OpenID Provider dao je iskaz za Identifier čije se informacije o pronalaženju ne slažu. 
+Informacije o krajnoj tački iskaza: 
+{0}
+Informacije o otkrivenoj krajnjoj tački:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>Lista ključeva se ne slaže sa ponuđenim rečnikom.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>Parametri '{0}' i '{1}' moraju oba biti ili ne smeju oba biti '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanom dužinom {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanim imenom '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Osim ako se ne koristi enkripcija transportnog sloja, "no-encryption" NE SME biti korišćen.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman sesija tipa '{0}' nije pronađena za OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>Nijedna OpenID krajnja tačka nije pronađena.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>Ova operacija je jedino dozvoljena kada je IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Nije moguće utvrditi verziju OpenID protokola implementiranog od strane Provider-a na krajnjoj tački '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>HTTP zahtev ka URL-u domena ({0}) rezultovao je redirekcijom, koja nije dozvoljena u togu pronalaženja Relying Party.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' nije unutar domena '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>{0} parametar ({1}) se ne slaže sa trenutnim URL ({2}) sa kojim je zahtev napravljen.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>openid.return_to parametar je neophodan u poruci zahteva da bi se konstruisao odgovor, ali ovaj parametar nedostaje.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>Sledeći parametri nisu uključeni u potpis a moraju da budu: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Neispravna vrednost za datum rođenja.  Mora biti u formi gggg-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>Tip mora implementirati {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>openid.user_setup_url parametar je neophodan prilikom slanja negativnih poruka sa iskazima prilikom odgovaranja na zahteve u trenutnom modu.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI razrešivanje neuspešno.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>Atribut sa URI tipom '{0}' je već dodat.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Samo {0} vrednosti za atribut '{1}' su zahtevane, ali {2} su ponuđene.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Prosleđivanje objekta tipa DateTime čije svojstvo Kind ima vrednost Unspecified nije dozvoljeno.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>Zahtevani tip asocijacije '{0}' sa sesijom tipa '{1}' nije prepoznat ili nije podržan od strane ovog Provider-a  zbog bezbedonosnih zahteva.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>Provider je zahtevao asocijaciju tipa '{0}' i sesiju tipa '{1}', koje nisu međusobno kompatibilne.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>Zahtev za autentifikacijom je već kreiran korišćenjem CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>Nijedan OpenID url nije ponuđen.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>Ekstenzija sa svojstvom ovog imena ('{0}') je već registrovana.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>Ekstenzija '{0}' je već registrovana.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>Ova operacija nije podržana od strane serijalizovanih odgovora za autentifikaciju. Pokušati ovu operaciju iz LoggedIn handler-a događaja.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>Nijedan XRDS dokument koji sadrži informaciju o OpenID Relying Party krajnjoj tački nije pronadjen u {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>Nezahtevani iskaz ne može biti poslat za navedeni identifikator {0} jer ovo nije autorizovani Provider za taj identifikator.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>Maksimalno dozvoljeno vreme za kompletiranje autentifikacije je isteklo. Molimo pokušajte ponovo.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Ne može se pronaći tajna za potpisivanje od strane handle-a '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>Odgovor nije spreman.  Koristiti najpre IsResponseReady za proveru da li je odgovor spreman.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>Ovo svojstvo nije dostupno zbog nepoznate konfiguracije kanala.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.identity i openid.claimed_id parametri moraju istovremeno biti prisutna ili istovremeno odsutna u poruci.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>Svojstvo ReturnTo ne sme biti null da bi se podržala ova operacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Odbijanje nezahtevanih iskaza zahteva skladište jedinstvenih identifikatora i skladište asocijacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane ovog Relying Party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Samo OpenID-jevi izdati direktno od strane njihovog OpenID Provider-a su ovde dozvoljeni.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI podrška je onemogućena na ovom sajtu.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>Skladište asocijacija nije dato a zahtevano je za trenutnu konfiguraciju.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>Svojstvo {0} je imalo neočekivanu vrednost {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>Ni jedan identifikator nije podešen.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>Ova vrednost svojstva nije podržana od strane ove kontrole.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>Ovo je već PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Žao nam je.  Ovaj sajt jedino prihvata OpenID-jeve koji su HTTPS-bezbedni, a {0} nije bezbedni Identifier.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>Tekući HttpContext nije detektovan, tako da {0} instanca mora biti eksplicitno postavljena ili specificirana u .config fajlu.  Pozvati preklopljeni konstruktor koji uzima parametar {0}.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>Konfiguraciono zavisni tip {0} mora biti javan, a on to nije.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>Konfiguraciona XAML referenca na {0} zahteva da se trenutni HttpContext razreši.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID provera neuspešna.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Greška u obradi XRDS dokumenta.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>XRDS dokumentu za XRI {0} nedostaje neophodni CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Ne može se pronaći XRI resolution Status tag ili je code attribute neispravan.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.resx b/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.resx
index b700d76..f0fcb61 100644
--- a/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.resx
+++ b/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,318 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
     <value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
   </data>
-  <data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
     <value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
   </data>
-  <data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
     <value>If an association store is given, a nonce store must also be provided.</value>
   </data>
-  <data name="BadAssociationPrivateData" xml:space="preserve">
+	<data name="BadAssociationPrivateData" xml:space="preserve">
     <value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
   </data>
-  <data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
     <value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
   </data>
-  <data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
     <value>A Simple Registration request can only generate a response on the receiving end.</value>
   </data>
-  <data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
     <value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
   </data>
-  <data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
     <value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
   </data>
-  <data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
     <value>The ClaimedIdentifier property must be set first.</value>
   </data>
-  <data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
     <value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
   </data>
-  <data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
     <value>URI is not SSL yet requireSslDiscovery is set to true.</value>
   </data>
-  <data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
     <value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
   </data>
-  <data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
     <value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
   </data>
-  <data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
     <value>Fragment segments do not apply to XRI identifiers.</value>
   </data>
-  <data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
     <value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
   </data>
-  <data name="IndirectErrorFormattedMessage" xml:space="preserve">
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
     <value>{0} (Contact: {1}, Reference: {2})</value>
   </data>
-  <data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
     <value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
   </data>
-  <data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
     <value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
   </data>
-  <data name="InvalidScheme" xml:space="preserve">
+	<data name="InvalidScheme" xml:space="preserve">
     <value>The scheme must be http or https but was '{0}'.</value>
   </data>
-  <data name="InvalidUri" xml:space="preserve">
+	<data name="InvalidUri" xml:space="preserve">
     <value>The value '{0}' is not a valid URI.</value>
   </data>
-  <data name="InvalidXri" xml:space="preserve">
+	<data name="InvalidXri" xml:space="preserve">
     <value>Not a recognized XRI format.</value>
   </data>
-  <data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
     <value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
 Assertion endpoint info: 
 {0}
 Discovered endpoint info:
 {1}</value>
   </data>
-  <data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
     <value>The list of keys do not match the provided dictionary.</value>
   </data>
-  <data name="MatchingArgumentsExpected" xml:space="preserve">
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
     <value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
   </data>
-  <data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
     <value>No recognized association type matches the requested length of {0}.</value>
   </data>
-  <data name="NoAssociationTypeFoundByName" xml:space="preserve">
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
     <value>No recognized association type matches the requested name of '{0}'.</value>
   </data>
-  <data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
     <value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
   </data>
-  <data name="NoSessionTypeFound" xml:space="preserve">
+	<data name="NoSessionTypeFound" xml:space="preserve">
     <value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
   </data>
-  <data name="OpenIdEndpointNotFound" xml:space="preserve">
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
     <value>No OpenID endpoint found.</value>
   </data>
-  <data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
     <value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
   </data>
-  <data name="ProviderVersionUnrecognized" xml:space="preserve">
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
     <value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
   </data>
-  <data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
     <value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
   </data>
-  <data name="ReturnToNotUnderRealm" xml:space="preserve">
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
     <value>return_to '{0}' not under realm '{1}'.</value>
   </data>
-  <data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
     <value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
   </data>
-  <data name="ReturnToRequiredForResponse" xml:space="preserve">
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
     <value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
   </data>
-  <data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
     <value>The following parameter(s) are not included in the signature but must be: {0}</value>
   </data>
-  <data name="SregInvalidBirthdate" xml:space="preserve">
+	<data name="SregInvalidBirthdate" xml:space="preserve">
     <value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
   </data>
-  <data name="TypeMustImplementX" xml:space="preserve">
+	<data name="TypeMustImplementX" xml:space="preserve">
     <value>The type must implement {0}.</value>
   </data>
-  <data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
     <value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
   </data>
-  <data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
     <value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
   </data>
-  <data name="XriResolutionFailed" xml:space="preserve">
+	<data name="XriResolutionFailed" xml:space="preserve">
     <value>XRI resolution failed.</value>
   </data>
-  <data name="AttributeAlreadyAdded" xml:space="preserve">
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
     <value>An attribute with type URI '{0}' has already been added.</value>
   </data>
-  <data name="AttributeTooManyValues" xml:space="preserve">
+	<data name="AttributeTooManyValues" xml:space="preserve">
     <value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
   </data>
-  <data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
     <value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
   </data>
-  <data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
     <value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
   </data>
-  <data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
     <value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
   </data>
-  <data name="CreateRequestAlreadyCalled" xml:space="preserve">
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
     <value>An authentication request has already been created using CreateRequest().</value>
   </data>
-  <data name="OpenIdTextBoxEmpty" xml:space="preserve">
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
     <value>No OpenID url is provided.</value>
   </data>
-  <data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
     <value>An extension with this property name ('{0}') has already been registered.</value>
   </data>
-  <data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
     <value>The extension '{0}' has already been registered.</value>
   </data>
-  <data name="UnexpectedHttpStatusCode" xml:space="preserve">
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
     <value>Unexpected HTTP status code {0} {1} received in direct response.</value>
   </data>
-  <data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
     <value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
   </data>
-  <data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
     <value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
   </data>
-  <data name="AbsoluteUriRequired" xml:space="preserve">
+	<data name="AbsoluteUriRequired" xml:space="preserve">
     <value>An absolute URI is required for this value.</value>
   </data>
-  <data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
     <value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
   </data>
-  <data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
     <value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
   </data>
-  <data name="PrivateRPSecretNotFound" xml:space="preserve">
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
     <value>Unable to find the signing secret by the handle '{0}'.</value>
   </data>
-  <data name="ResponseNotReady" xml:space="preserve">
+	<data name="ResponseNotReady" xml:space="preserve">
     <value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
   </data>
-  <data name="UnsupportedChannelConfiguration" xml:space="preserve">
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
     <value>This feature is unavailable due to an unrecognized channel configuration.</value>
   </data>
-  <data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
     <value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
   </data>
-  <data name="ReturnToRequiredForOperation" xml:space="preserve">
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
     <value>The ReturnTo property must not be null to support this operation.</value>
   </data>
-  <data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
     <value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
   </data>
-  <data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
     <value>Unsolicited assertions are not allowed at this relying party.</value>
   </data>
-  <data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
     <value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
   </data>
-  <data name="XriResolutionDisabled" xml:space="preserve">
+	<data name="XriResolutionDisabled" xml:space="preserve">
     <value>XRI support has been disabled at this site.</value>
   </data>
-  <data name="AssociationStoreRequired" xml:space="preserve">
+	<data name="AssociationStoreRequired" xml:space="preserve">
     <value>No association store has been given but is required for the current configuration.</value>
   </data>
-  <data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
     <value>The property {0} had unexpected value {1}.</value>
   </data>
-  <data name="NoIdentifierSet" xml:space="preserve">
+	<data name="NoIdentifierSet" xml:space="preserve">
     <value>No identifier has been set.</value>
   </data>
-  <data name="PropertyValueNotSupported" xml:space="preserve">
+	<data name="PropertyValueNotSupported" xml:space="preserve">
     <value>This property value is not supported by this control.</value>
   </data>
-  <data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
     <value>This is already a PPID Identifier.</value>
   </data>
-  <data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
     <value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
   </data>
-  <data name="BadExtension" xml:space="preserve">
+	<data name="BadExtension" xml:space="preserve">
     <value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
   </data>
-  <data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
     <value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
   </data>
-  <data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
     <value>The HTML head tag must include runat="server".</value>
   </data>
-  <data name="PropertyNotSet" xml:space="preserve">
+	<data name="PropertyNotSet" xml:space="preserve">
     <value>The {0} property must be set first.</value>
   </data>
-  <data name="X509CertificateNotTrusted" xml:space="preserve">
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
     <value>The X.509 certificate used to sign this document is not trusted.</value>
   </data>
-  <data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
     <value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
   </data>
-  <data name="MissingElement" xml:space="preserve">
+	<data name="MissingElement" xml:space="preserve">
     <value>Missing {0} element.</value>
   </data>
-  <data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
     <value>The associate request instance must be a Diffie-Hellman instance.</value>
   </data>
-  <data name="InvalidDSig" xml:space="preserve">
+	<data name="InvalidDSig" xml:space="preserve">
     <value>Invalid XmlDSig signature on XRDS document.</value>
   </data>
-  <data name="MisdirectedSigningCertificate" xml:space="preserve">
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
     <value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
   </data>
-  <data name="PopupRedirectMissingResponse" xml:space="preserve">
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
     <value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
   </data>
-  <data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
     <value>Unrecognized or missing canonicalization method.</value>
   </data>
-  <data name="UnsupportedSignatureMethod" xml:space="preserve">
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
     <value>Unrecognized or missing signature method.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID verification failed.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Failure parsing XRDS document.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.sr.resx b/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.sr.resx
index 0df62c0..cff5a5f 100644
--- a/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.sr.resx
+++ b/src/DotNetOpenAuth.OpenId/OpenId/OpenIdStrings.sr.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,282 +59,516 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
     <value>Dužina deljene tajne ({0}) ne slaže se sa dužinom zahtevanom od povezujućeg tipa ('{1}').</value>
   </data>
-  <data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
     <value>Dužina šifrovane deljene tajne ({0}) ne slaže se sa dužinom hashing algoritma ({1}).</value>
   </data>
-  <data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
     <value>Ako je dato povezujuće skladište, jedinstveni identifikator skladišta takođe mora biti prisutan.</value>
   </data>
-  <data name="BadAssociationPrivateData" xml:space="preserve">
+	<data name="BadAssociationPrivateData" xml:space="preserve">
     <value>Dostavljeni privatni podaci ne slažu se ni sa jednim poznatim Association tipom.  Dužina im je možda prekratka ili su podaci neispravni.</value>
   </data>
-  <data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
     <value>Callback argumenti su podržani jedino kada je {0} dustupan za {1}.</value>
   </data>
-  <data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
     <value>Simple Registration zahtev može generisati odgovor jedino na prijemnoj strani.</value>
   </data>
-  <data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
     <value>openid.claimed_id i openid.identity parametri moraju istovremeno biti prisutni ili nedostajati.</value>
   </data>
-  <data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
     <value>ClaimedIdentifier svojstvo ne može se podesiti kada IsDelegatedIdentifier ima vrednost true da bi se izbeglo narušavanje OpenID URL delegiranja.</value>
   </data>
-  <data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
     <value>ClaimedIdentifier svojstvo se najpre mora podesiti.</value>
   </data>
-  <data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
     <value>Sledeća svojstva moraju biti podešena pre nego što Diffie-Hellmanov algoritam može generisati javni ključ: {0}</value>
   </data>
-  <data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
     <value>URI nije SSL a svojstvo requireSslDiscovery je podešeno na true.</value>
   </data>
-  <data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
     <value>Prostor deljenja proširenja '{0}' je već dodat. Samo jedno proširenje po prostoru je dozvoljeno u datom zahtevu.</value>
   </data>
-  <data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
     <value>Ne može se tražiti podrška za proširenja na rehidriranom ServiceEndpoint.</value>
   </data>
-  <data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
     <value>Segmenti fragmenta se ne primenjuju na XRI identifikatore.</value>
   </data>
-  <data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
     <value>ClaimedIdentifier i LocalIdentifier moraju biti isti kada IsIdentifierSelect ima vrednost true.</value>
   </data>
-  <data name="IndirectErrorFormattedMessage" xml:space="preserve">
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
     <value>{0} (Kontakt: {1}, Referenca: {2})</value>
   </data>
-  <data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
     <value>Ne može se enkodovati '{0}' jer sadrži nevalidan znak za Key-Value Form enkodiranje.  (linija {1}: '{2}')</value>
   </data>
-  <data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
     <value>Ne može se dekodovati Key-Value Form jer je pronađena linija bez  '{0}' znaka.  (linija {1}: '{2}')</value>
   </data>
-  <data name="InvalidScheme" xml:space="preserve">
+	<data name="InvalidScheme" xml:space="preserve">
     <value>Šema mora biti http ili https a bila je '{0}'.</value>
   </data>
-  <data name="InvalidUri" xml:space="preserve">
+	<data name="InvalidUri" xml:space="preserve">
     <value>Vrednost '{0}' nije validan URI.</value>
   </data>
-  <data name="InvalidXri" xml:space="preserve">
-    <value>Nije prepoznat XRI format: '{0}'.</value>
+	<data name="InvalidXri" xml:space="preserve">
+    <value>Nije prepoznat XRI format'.</value>
   </data>
-  <data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
     <value>OpenID Provider dao je iskaz za Identifier čije se informacije o pronalaženju ne slažu. 
 Informacije o krajnoj tački iskaza: 
 {0}
 Informacije o otkrivenoj krajnjoj tački:
 {1}</value>
   </data>
-  <data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
     <value>Lista ključeva se ne slaže sa ponuđenim rečnikom.</value>
   </data>
-  <data name="MatchingArgumentsExpected" xml:space="preserve">
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
     <value>Parametri '{0}' i '{1}' moraju oba biti ili ne smeju oba biti '{2}'.</value>
   </data>
-  <data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
     <value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanom dužinom {0}.</value>
   </data>
-  <data name="NoAssociationTypeFoundByName" xml:space="preserve">
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
     <value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanim imenom '{0}'.</value>
   </data>
-  <data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
     <value>Osim ako se ne koristi enkripcija transportnog sloja, "no-encryption" NE SME biti korišćen.</value>
   </data>
-  <data name="NoSessionTypeFound" xml:space="preserve">
+	<data name="NoSessionTypeFound" xml:space="preserve">
     <value>Diffie-Hellman sesija tipa '{0}' nije pronađena za OpenID {1}.</value>
   </data>
-  <data name="OpenIdEndpointNotFound" xml:space="preserve">
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
     <value>Nijedna OpenID krajnja tačka nije pronađena.</value>
   </data>
-  <data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
     <value>Ova operacija je jedino dozvoljena kada je IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
   </data>
-  <data name="ProviderVersionUnrecognized" xml:space="preserve">
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
     <value>Nije moguće utvrditi verziju OpenID protokola implementiranog od strane Provider-a na krajnjoj tački '{0}'.</value>
   </data>
-  <data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
     <value>HTTP zahtev ka URL-u domena ({0}) rezultovao je redirekcijom, koja nije dozvoljena u togu pronalaženja Relying Party.</value>
   </data>
-  <data name="ReturnToNotUnderRealm" xml:space="preserve">
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
     <value>return_to '{0}' nije unutar domena '{1}'.</value>
   </data>
-  <data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
     <value>{0} parametar ({1}) se ne slaže sa trenutnim URL ({2}) sa kojim je zahtev napravljen.</value>
   </data>
-  <data name="ReturnToRequiredForResponse" xml:space="preserve">
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
     <value>openid.return_to parametar je neophodan u poruci zahteva da bi se konstruisao odgovor, ali ovaj parametar nedostaje.</value>
   </data>
-  <data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
     <value>Sledeći parametri nisu uključeni u potpis a moraju da budu: {0}</value>
   </data>
-  <data name="SregInvalidBirthdate" xml:space="preserve">
+	<data name="SregInvalidBirthdate" xml:space="preserve">
     <value>Neispravna vrednost za datum rođenja.  Mora biti u formi gggg-MM-dd.</value>
   </data>
-  <data name="TypeMustImplementX" xml:space="preserve">
+	<data name="TypeMustImplementX" xml:space="preserve">
     <value>Tip mora implementirati {0}.</value>
   </data>
-  <data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
     <value>Nezahtevani iskazi nisu dozvoljeni od strane 1.0 OpenID Providers.</value>
   </data>
-  <data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
     <value>openid.user_setup_url parametar je neophodan prilikom slanja negativnih poruka sa iskazima prilikom odgovaranja na zahteve u trenutnom modu.</value>
   </data>
-  <data name="XriResolutionFailed" xml:space="preserve">
+	<data name="XriResolutionFailed" xml:space="preserve">
     <value>XRI razrešivanje neuspešno.</value>
   </data>
-  <data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
     <value>Tekući HttpContext nije detektovan, tako da {0} instanca mora biti eksplicitno postavljena ili specificirana u .config fajlu.  Pozvati preklopljeni konstruktor koji uzima parametar {0}.</value>
   </data>
-  <data name="AttributeAlreadyAdded" xml:space="preserve">
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
     <value>Atribut sa URI tipom '{0}' je već dodat.</value>
   </data>
-  <data name="AttributeTooManyValues" xml:space="preserve">
+	<data name="AttributeTooManyValues" xml:space="preserve">
     <value>Samo {0} vrednosti za atribut '{1}' su zahtevane, ali {2} su ponuđene.</value>
   </data>
-  <data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
     <value>Prosleđivanje objekta tipa DateTime čije svojstvo Kind ima vrednost Unspecified nije dozvoljeno.</value>
   </data>
-  <data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
     <value>Zahtevani tip asocijacije '{0}' sa sesijom tipa '{1}' nije prepoznat ili nije podržan od strane ovog Provider-a  zbog bezbedonosnih zahteva.</value>
   </data>
-  <data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
     <value>Provider je zahtevao asocijaciju tipa '{0}' i sesiju tipa '{1}', koje nisu međusobno kompatibilne.</value>
   </data>
-  <data name="CreateRequestAlreadyCalled" xml:space="preserve">
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
     <value>Zahtev za autentifikacijom je već kreiran korišćenjem CreateRequest().</value>
   </data>
-  <data name="OpenIdTextBoxEmpty" xml:space="preserve">
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
     <value>Nijedan OpenID url nije ponuđen.</value>
   </data>
-  <data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
     <value>Ekstenzija sa svojstvom ovog imena ('{0}') je već registrovana.</value>
   </data>
-  <data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
     <value>Ekstenzija '{0}' je već registrovana.</value>
   </data>
-  <data name="UnexpectedHttpStatusCode" xml:space="preserve">
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
     <value>Neočekivani HTTP statusni kod {0} {1} primljen u direktnom odgovoru.</value>
   </data>
-  <data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
     <value>Ova operacija nije podržana od strane serijalizovanih odgovora za autentifikaciju. Pokušati ovu operaciju iz LoggedIn handler-a događaja.</value>
   </data>
-  <data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
     <value>Nijedan XRDS dokument koji sadrži informaciju o OpenID Relying Party krajnjoj tački nije pronadjen u {0}.</value>
   </data>
-  <data name="AbsoluteUriRequired" xml:space="preserve">
+	<data name="AbsoluteUriRequired" xml:space="preserve">
     <value>Absolutni URI je zahtevan za ovu vrednost.</value>
   </data>
-  <data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
     <value>Nezahtevani iskaz ne može biti poslat za navedeni identifikator {0} jer ovo nije autorizovani Provider za taj identifikator.</value>
   </data>
-  <data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
     <value>Maksimalno dozvoljeno vreme za kompletiranje autentifikacije je isteklo. Molimo pokušajte ponovo.</value>
   </data>
-  <data name="PrivateRPSecretNotFound" xml:space="preserve">
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
     <value>Ne može se pronaći tajna za potpisivanje od strane handle-a '{0}'.</value>
   </data>
-  <data name="ResponseNotReady" xml:space="preserve">
+	<data name="ResponseNotReady" xml:space="preserve">
     <value>Odgovor nije spreman.  Koristiti najpre IsResponseReady za proveru da li je odgovor spreman.</value>
   </data>
-  <data name="UnsupportedChannelConfiguration" xml:space="preserve">
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
     <value>Ovo svojstvo nije dostupno zbog nepoznate konfiguracije kanala.</value>
   </data>
-  <data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
     <value>openid.identity i openid.claimed_id parametri moraju istovremeno biti prisutna ili istovremeno odsutna u poruci.</value>
   </data>
-  <data name="ReturnToRequiredForOperation" xml:space="preserve">
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
     <value>Svojstvo ReturnTo ne sme biti null da bi se podržala ova operacija.</value>
   </data>
-  <data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
     <value>Odbijanje nezahtevanih iskaza zahteva skladište jedinstvenih identifikatora i skladište asocijacija.</value>
   </data>
-  <data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
     <value>Nezahtevani iskazi nisu dozvoljeni od strane ovog Relying Party.</value>
   </data>
-  <data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
     <value>Samo OpenID-jevi izdati direktno od strane njihovog OpenID Provider-a su ovde dozvoljeni.</value>
   </data>
-  <data name="XriResolutionDisabled" xml:space="preserve">
+	<data name="XriResolutionDisabled" xml:space="preserve">
     <value>XRI podrška je onemogućena na ovom sajtu.</value>
   </data>
-  <data name="AssociationStoreRequired" xml:space="preserve">
+	<data name="AssociationStoreRequired" xml:space="preserve">
     <value>Skladište asocijacija nije dato a zahtevano je za trenutnu konfiguraciju.</value>
   </data>
-  <data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
     <value>Svojstvo {0} je imalo neočekivanu vrednost {1}.</value>
   </data>
-  <data name="NoIdentifierSet" xml:space="preserve">
+	<data name="NoIdentifierSet" xml:space="preserve">
     <value>Ni jedan identifikator nije podešen.</value>
   </data>
-  <data name="PropertyValueNotSupported" xml:space="preserve">
+	<data name="PropertyValueNotSupported" xml:space="preserve">
     <value>Ova vrednost svojstva nije podržana od strane ove kontrole.</value>
   </data>
-  <data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
     <value>Ovo je već PPID Identifier.</value>
   </data>
-  <data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
     <value>Žao nam je.  Ovaj sajt jedino prihvata OpenID-jeve koji su HTTPS-bezbedni, a {0} nije bezbedni Identifier.</value>
   </data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>Nijedan PPID provajder nije konfigurisan.</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Svojstvo {0}.{1} argumenta je neophodno, ali je ono prazno ili nepostojeće.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current je nepostojeći.  Mora postojati ASP.NET zahtev u procesu da bi ova operacija bila uspešna.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0}.  Da li nedostaje [DataContract] atribut?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0} jer svojstvo DataContractAttribute.Namespace property nije podešeno.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>Instanca tipa {0} je bila očekivana, a primljena je neočekivana izvedena instanca tipa {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>Svojstvo Recipient usmerene poruke ne sme biti nepostojeće.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>Dati set opcija nije podržan od strane.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Greška prilikom deserijalizacije poruke {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Greška se desila tokom slanja usmerene poruke ili tokom primanja odgovora.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>Ovaj izuzetak nije napravljen sa početnom porukom koja ga je izazvala.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} a primljena poruka nije prepoznata.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>Poruka ističe u {0} a sada je {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>Bar jedan od GET ili POST flegova mora biti prisutan.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>Ovaj metod zahteva tekući HttpContext. Kao alternativa, koristite preklopljeni metod koji dozvoljava da se prosledi informacija bez HttpContext-a.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Poruke koje ukazuju na indirektni transport moraju implementirati {0} interfejs.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Nebezbedan web zahtev za '{0}' prekinut zbog bezbednosnih zahteva koji zahtevaju HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>Poruka {0} je zahtevala zaštite {{{1}}} ali prenosni kanal nije mogao primeniti {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>Redosled prilagođenih vezujućih elemenata je neispravan.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Neki deo ili delovi poruke imaju nevalidne vrednosti: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>Primljena poruka imala je neispravan ili nedostajući jedinstveni identifikator.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>Element sa istom vrednošću ključa je već dodat.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>Poruka {0} ne podržava ekstenzije.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>Vrednost za {0}.{1} člana {1} je trebala da bude izvedena od  {2} ali je izvedena od {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Greška prilikom čitanja poruke '{0}' parametar '{1}' sa vrednošću '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Parametar poruke '{0}' sa vrednošću '{1}' nije se base64-dekodovao.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Greška prilikom pripremanja poruke '{0}' parametra '{1}' za slanje.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>Poruka-odgovor je već u redu za slanje u stream-u za odgovore.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>Ova poruka je već obrađena.  Ovo može ukazivati na replay napad u toku.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava replay zaštitu.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>Sledeći zahtevani parametri koji ne smeju biti prazni su bili prazni u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>Sledeći zahtevani parametri nedostaju u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>Povezujući element koji nudi {0} zaštitu zahteva drugu zaštitu koja nije ponuđena.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>Lista je prazna.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>Lista sadrži prazan (null) element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Potpis poruke je neispravan.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava potpisivanje poruka. Da bi podržao potpisivanje poruka, izvedeni tip Channel mora preklopiti Sign i IsSignatureValid metode.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>Svojstvo stream-a CanRead je vratilo false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>Svojstvo stream-a CanWrite je vratilo false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Očekivano je da najviše 1 povezujući element primeni zaštitu {0}, ali je više njih primenjeno.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>Maksimalno dozvoljeni broj redirekcija je prekoračen u toku zahtevanja '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>Niz ne sme biti prazan.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>Prazan string nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Parametar poruke '{0}' ima neočekivanu '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Očekivano je da od poruke {0} parametar '{1}' ima vrednost '{2}' ali je imao vrednost '{3}'.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} ali je umesto nje primljena {1}.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Poruka neočekivanog tipa je primljena.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>null ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>null ili prazan ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>null vrednost je uključena za ključ '{0}' a nije dozvoljena.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>Tip {0} ili izvedeni tip je očekivan, a dat je {1}.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} svojstvo ima nepoznatu vrednost {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>URL '{0}' je rangiran kao nebezbedan i ne može se zahtevati na ovaj način.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirekcije na POST zahteve usmerene ka serverima kojima se ne veruje nisu podržane.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web zahtev za '{0}' nije uspeo.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>Ovaj izuzetak mora se kreirati zajedno sa primaocem koji će primiti poruku o grešci ili sa instancom poruke direktnog zahteva na koju će ovaj izuzetak odgovoriti.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' poruka ne može biti primljeno sa HTTP glagolom '{1}'.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>HTTP glagol '{0}' je neprepoznat i nije podržan.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Ne može se poslati pristupni token za Consumera za token zahteva '{0}' pre nego što bude autorizovan.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>Pristupni token '{0}' je neispravan ili je mu je istekao rok važenja.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Greška u traženju šifre za korisnika ili za token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument je neispravan.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>Neispravna OAuth poruka je primljena i odbačena.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>Poruka {0} je sadržala višak podataka koji nije dozvoljen.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>Ovaj provajder OAuth usluge zahteva od OAuth korisnika da da implementira OAuth {0}, ali izgleda da korisnika podržava jedino {1}.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Korišćenje OpenID+OAuth ekstenzije zahteva da token menadžer koji se koristi implementira {0} interfejs.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>OpenID Relying Party domen nije prepoznat kao da pripada OAuth Consumeru identifikovanom po datom korisničkom tokenu.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>URL upit zahteva NE SME sadržati bilo kakve OAuth Protocol Parametre.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>Potpisujući element je već asociran sa kanalom.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>Svi elementi za potpisivanje moraju nuditi istu zaštitu poruke.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>Token u poruci nije prepoznat od strane provajdera usluge.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>RSA-SHA1 potpisujući povezujući element nije podešen sa sertifikatom za potpisivanje.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>Konfiguraciono zavisni tip {0} mora biti javan, a on to nije.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>Konfiguraciona XAML referenca na {0} zahteva da se trenutni HttpContext razreši.</value>
+	</data>
+	<data name="CIDVerificationFailed" xml:space="preserve">
+		<value>XRI CanonicalID provera neuspešna.</value>
+	</data>
+	<data name="InvalidXRDSDocument" xml:space="preserve">
+		<value>Greška u obradi XRDS dokumenta.</value>
+	</data>
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
+		<value>XRDS dokumentu za XRI {0} nedostaje neophodni CanonicalID element.</value>
+	</data>
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
+		<value>Ne može se pronaći XRI resolution Status tag ili je code attribute neispravan.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.resx b/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.resx
index acb43f2..b1286f6 100644
--- a/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.resx
+++ b/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,74 +59,738 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="CIDVerificationFailed" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="CIDVerificationFailed" xml:space="preserve">
     <value>XRI CanonicalID verification failed.</value>
   </data>
-  <data name="InvalidXRDSDocument" xml:space="preserve">
+	<data name="InvalidXRDSDocument" xml:space="preserve">
     <value>Failure parsing XRDS document.</value>
   </data>
-  <data name="MissingCanonicalIDElement" xml:space="preserve">
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
     <value>The XRDS document for XRI {0} is missing the required CanonicalID element.</value>
   </data>
-  <data name="XriResolutionStatusMissing" xml:space="preserve">
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
     <value>Could not find XRI resolution Status tag or code attribute was invalid.</value>
   </data>
+	<data name="AccessScopeExceedsGrantScope" xml:space="preserve">
+		<value>The requested access scope exceeds the grant scope.</value>
+	</data>
+	<data name="AccessTokenSigningKeyMissing" xml:space="preserve">
+		<value>The access token's private signing key must be set.</value>
+	</data>
+	<data name="ClientCallbackDisallowed" xml:space="preserve">
+		<value>The callback URL ({0}) is not allowed for this client.</value>
+	</data>
+	<data name="ClientOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for client or token.</value>
+	</data>
+	<data name="ClientSecretMismatch" xml:space="preserve">
+		<value>The client secret was incorrect.</value>
+	</data>
+	<data name="InvalidResourceOwnerPasswordCredential" xml:space="preserve">
+		<value>Invalid resource owner password credential.</value>
+	</data>
+	<data name="NoCallback" xml:space="preserve">
+		<value>No callback URI was available for this request.</value>
+	</data>
+	<data name="PapeRequestMissingRequiredPolicies" xml:space="preserve">
+		<value>The PAPE request has an incomplete set of authentication policies.</value>
+	</data>
+	<data name="PapeResponseOrRequiredPoliciesMissing" xml:space="preserve">
+		<value>A PAPE response is missing or is missing required policies.</value>
+	</data>
+	<data name="PiiIncludedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be included in authentication responses when the PAPE authentication policy http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf is present.</value>
+	</data>
+	<data name="PiiRequestedWithNoPiiPolicy" xml:space="preserve">
+		<value>No personally identifiable information should be requested when the http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf PAPE policy is present.</value>
+	</data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>No PPID provider has been configured.</value>
+	</data>
+	<data name="RealmDiscoveryNotPerformed" xml:space="preserve">
+		<value>Discovery on the Realm URL MUST be performed before sending a positive assertion.</value>
+	</data>
+	<data name="RealmMustBeHttps" xml:space="preserve">
+		<value>The Realm in an authentication request must be an HTTPS URL.</value>
+	</data>
+	<data name="RefreshTokenInappropriateForRequestType" xml:space="preserve">
+		<value>The request message type {0} should not be responded to with a refresh token.</value>
+	</data>
+	<data name="TokenEndpointErrorFormat" xml:space="preserve">
+		<value>The Authorization Server's token endpoint generated error {0}: '{1}'</value>
+	</data>
+	<data name="AccessTokenRefreshFailed" xml:space="preserve">
+		<value>Access token has expired and cannot be automatically refreshed.</value>
+	</data>
+	<data name="AuthorizationExpired" xml:space="preserve">
+		<value>Authorization has expired.</value>
+	</data>
+	<data name="AuthorizationResponseUnexpectedMismatch" xml:space="preserve">
+		<value>Unexpected OAuth authorization response received with callback and client state that does not match an expected value.</value>
+	</data>
+	<data name="CannotObtainAccessTokenWithReason" xml:space="preserve">
+		<value>Failed to obtain access token.  Authorization Server reports reason: {0}</value>
+	</data>
+	<data name="UnexpectedResponseContentType" xml:space="preserve">
+		<value>Unexpected response Content-Type {0}</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Argument's {0}.{1} property is required but is empty or null.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current is null.  There must be an ASP.NET request in process for this operation to succeed.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0}.  Is it missing a [DataContract] attribute?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer could not be initialized on message type {0} because the DataContractAttribute.Namespace property is not set.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>An instance of type {0} was expected, but received unexpected derived type {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>The directed message's Recipient property must not be null.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>The given set of options is not supported by this web request handler.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Error while deserializing message {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Error occurred while sending a direct message or getting the response.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>This exception was not constructed with a root request message that caused it.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Expected {0} message but received no recognizable message.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>The message expired at {0} and it is now {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>At least one of GET or POST flags must be present.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>This method requires a current HttpContext.  Alternatively, use an overload of this method that allows you to pass in information without an HttpContext.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Messages that indicate indirect transport must implement the {0} interface.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Insecure web request for '{0}' aborted due to security requirements demanding HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>The {0} message required protections {{{1}}} but the channel could only apply {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>The customized binding element ordering is invalid.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Some part(s) of the message have invalid values: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>The incoming message had an invalid or missing nonce.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>An item with the same key has already been added.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>The {0} message does not support extensions.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>The value for {0}.{1} on member {1} was expected to derive from {2} but was {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Error while reading message '{0}' parameter '{1}' with value '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Message parameter '{0}' with value '{1}' failed to base64 decode.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Error while preparing message '{0}' parameter '{1}' for sending.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>A message response is already queued for sending in the response stream.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>This message has already been processed.  This could indicate a replay attack in progress.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>This channel does not support replay protection.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>The following required non-empty parameters were empty in the {0} message: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>The following required parameters were missing from the {0} message: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>The binding element offering the {0} protection requires other protection that is not provided.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>The list is empty.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>The list contains a null element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Message signature was incorrect.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>This channel does not support signing messages.  To support signing messages, a derived Channel type must override the Sign and IsSignatureValid methods.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>The stream's CanRead property returned false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>The stream's CanWrite property returned false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Expected at most 1 binding element to apply the {0} protection, but more than one applied.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>The maximum allowable number of redirects were exceeded while requesting '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>The array must not be empty.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Message parameter '{0}' had unexpected value '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Expected message {0} parameter '{1}' to have value '{2}' but had '{3}' instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Expected message {0} but received {1} instead.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Unexpected message type received.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>A null key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>A null or empty key was included and is not allowed.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>A null value was included for key '{0}' and is not allowed.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>The type {0} or a derived type was expected, but {1} was given.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} property has unrecognized value {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>The URL '{0}' is rated unsafe and cannot be requested this way.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirects on POST requests that are to untrusted servers is not supported.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web request to '{0}' failed.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>This exception must be instantiated with a recipient that will receive the error message, or a direct request message instance that this exception will respond to.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' messages cannot be received with HTTP verb '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Unexpected HTTP status code {0} {1} received in direct response.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>The HTTP verb '{0}' is unrecognized and unsupported.</value>
+	</data>
+	<data name="NonEmptyStringExpected" xml:space="preserve">
+		<value>A non-empty string was expected.</value>
+	</data>
+	<data name="StreamMustHaveKnownLength" xml:space="preserve">
+		<value>The stream must have a known length.</value>
+	</data>
+	<data name="BinaryDataRequiresMultipart" xml:space="preserve">
+		<value>Unable to send all message data because some of it requires multi-part POST, but IMessageWithBinaryData.SendAsMultipart was false.</value>
+	</data>
+	<data name="SessionRequired" xml:space="preserve">
+		<value>An HttpContext.Current.Session object is required.</value>
+	</data>
+	<data name="StandardMessageFactoryUnsupportedMessageType" xml:space="preserve">
+		<value>This message factory does not support message type(s): {0}</value>
+	</data>
+	<data name="RequiredMessagePartConstantIncorrect" xml:space="preserve">
+		<value>The following message parts had constant value requirements that were unsatisfied: {0}</value>
+	</data>
+	<data name="EncoderInstantiationFailed" xml:space="preserve">
+		<value>Unable to instantiate the message part encoder/decoder type {0}.</value>
+	</data>
+	<data name="MessageTimestampInFuture" xml:space="preserve">
+		<value>This message has a timestamp of {0}, which is beyond the allowable clock skew for in the future.</value>
+	</data>
+	<data name="UnsupportedEncryptionAlgorithm" xml:space="preserve">
+		<value>This blob is not a recognized encryption format.</value>
+	</data>
+	<data name="ExtraParameterAddFailure" xml:space="preserve">
+		<value>Failed to add extra parameter '{0}' with value '{1}'.</value>
+	</data>
+	<data name="ExpectedParameterWasMissing" xml:space="preserve">
+		<value>The message part {0} was expected in the {1} message but was not found.</value>
+	</data>
+	<data name="MessageExceedsGetSizePostNotAllowed" xml:space="preserve">
+		<value>Message too large for a HTTP GET, and HTTP POST is not allowed for this message type.</value>
+	</data>
+	<data name="MissingDecryptionKeyForHandle" xml:space="preserve">
+		<value>Missing decryption key for bucket "{0}" handle "{1}"</value>
+	</data>
+	<data name="UnexpectedBufferLength" xml:space="preserve">
+		<value>Unexpected buffer length.</value>
+	</data>
+	<data name="DataCorruptionDetected" xml:space="preserve">
+		<value>Decoding failed due to data corruption.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Cannot send access token to Consumer for request token '{0}' before it has been authorized.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>The access token '{0}' is invalid or expired.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Failure looking up secret for consumer or token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument was incorrect.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>An invalid OAuth message received and discarded.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>The {0} message included extra data which is not allowed.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>This OAuth service provider requires OAuth consumers to implement OAuth {0}, but this consumer appears to only support {1}.</value>
+	</data>
+	<data name="MultipartPostMustBeUsedWithAuthHeader" xml:space="preserve">
+		<value>Cannot send OAuth message as multipart POST without an authorization HTTP header because sensitive data would not be signed.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Use of the OpenID+OAuth extension requires that the token manager in use implement the {0} interface.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>The OpenID Relying Party's realm is not recognized as belonging to the OAuth Consumer identified by the consumer key given.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>The request URL query MUST NOT contain any OAuth Protocol Parameters.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>The signing element already has been associated with a channel.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>All signing elements must offer the same message protection.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>A token in the message was not recognized by the service provider.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>The RSA-SHA1 signing binding element has not been set with a certificate for signing.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>An absolute URI is required for this value.</value>
+	</data>
+	<data name="AccessTokenInvalidForHttpAuthorizationHeader" xml:space="preserve">
+		<value>The access token contains characters that must not appear in the HTTP Authorization header.</value>
+	</data>
+	<data name="BearerTokenUnauthorizedAtLeastOneParameterRequired" xml:space="preserve">
+		<value>At least one parameter is required for the Bearer scheme in its WWW-Authenticate header.</value>
+	</data>
+	<data name="HttpsRequired" xml:space="preserve">
+		<value>This message can only be sent over HTTPS.</value>
+	</data>
+	<data name="InvalidScopeToken" xml:space="preserve">
+		<value>The scope token "{0}" contains illegal characters or is empty.</value>
+	</data>
+	<data name="NoGrantNoRefreshToken" xml:space="preserve">
+		<value>Refresh tokens should not be granted without the request including an access grant.</value>
+	</data>
+	<data name="ParameterContainsIllegalCharacters" xml:space="preserve">
+		<value>The '{0}' parameter contains the illegal character '{1}'.</value>
+	</data>
+	<data name="ResultShouldNotBeNull" xml:space="preserve">
+		<value>The return value of {0}.{1} should never be null.</value>
+	</data>
+	<data name="ScopesMayNotContainSpaces" xml:space="preserve">
+		<value>Individual scopes may not contain spaces.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>The length of the shared secret ({0}) does not match the length required by the association type ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>The length of the encrypted shared secret ({0}) does not match the length of the hashing algorithm ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>If an association store is given, a nonce store must also be provided.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>The private data supplied does not meet the requirements of any known Association type.  Its length may be too short, or it may have been corrupted.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback arguments are only supported when a {0} is provided to the {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>A Simple Registration request can only generate a response on the receiving end.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.claimed_id and openid.identity parameters must both be present or both be absent.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>The ClaimedIdentifier property cannot be set when IsDelegatedIdentifier is true to avoid breaking OpenID URL delegation.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>The ClaimedIdentifier property must be set first.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>The following properties must be set before the Diffie-Hellman algorithm can generate a public key: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI is not SSL yet requireSslDiscovery is set to true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>An extension sharing namespace '{0}' has already been added.  Only one extension per namespace is allowed in a given request.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Cannot lookup extension support on a rehydrated ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Fragment segments do not apply to XRI identifiers.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier and LocalIdentifier must be the same when IsIdentifierSelect is true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Contact: {1}, Reference: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Cannot encode '{0}' because it contains an illegal character for Key-Value Form encoding.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Cannot decode Key-Value Form because a line was found without a '{0}' character.  (line {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>The scheme must be http or https but was '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>The value '{0}' is not a valid URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Not a recognized XRI format.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>The OpenID Provider issued an assertion for an Identifier whose discovery information did not match.  
+Assertion endpoint info: 
+{0}
+Discovered endpoint info:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>The list of keys do not match the provided dictionary.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>The '{0}' and '{1}' parameters must both be or not be '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>No recognized association type matches the requested length of {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>No recognized association type matches the requested name of '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Unless using transport layer encryption, "no-encryption" MUST NOT be used.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman session type '{0}' not found for OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>No OpenID endpoint found.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>This operation is only allowed when IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Unable to determine the version of the OpenID protocol implemented by the Provider at endpoint '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>An HTTP request to the realm URL ({0}) resulted in a redirect, which is not allowed during relying party discovery.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' not under realm '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>The {0} parameter ({1}) does not match the actual URL ({2}) the request was made with.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>The openid.return_to parameter is required in the request message in order to construct a response, but that parameter was missing.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>The following parameter(s) are not included in the signature but must be: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Invalid birthdate value.  Must be in the form yyyy-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>The type must implement {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed from 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>The openid.user_setup_url parameter is required when sending negative assertion messages in response to immediate mode requests.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI resolution failed.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>An attribute with type URI '{0}' has already been added.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Only {0} values for attribute '{1}' were requested, but {2} were supplied.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Providing a DateTime whose Kind is Unspecified is not allowed.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>The requested association type '{0}' with session type '{1}' is unrecognized or not supported by this Provider due to security requirements.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>The Provider requested association type '{0}' and session type '{1}', which are not compatible with each other.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>An authentication request has already been created using CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>No OpenID url is provided.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>An extension with this property name ('{0}') has already been registered.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>The extension '{0}' has already been registered.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>This operation is not supported by serialized authentication responses.  Try this operation from the LoggedIn event handler.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>No XRDS document containing OpenID relying party endpoint information could be found at {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>An unsolicited assertion cannot be sent for the claimed identifier {0} because this is not an authorized Provider for that identifier.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>The maximum time allowed to complete authentication has been exceeded.  Please try again.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Unable to find the signing secret by the handle '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>The response is not ready.  Use IsResponseReady to check whether a response is ready first.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>This feature is unavailable due to an unrecognized channel configuration.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>The openid.identity and openid.claimed_id parameters must either be both present or both absent from the message.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>The ReturnTo property must not be null to support this operation.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Rejecting unsolicited assertions requires a nonce store and an association store.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Unsolicited assertions are not allowed at this relying party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Only OpenIDs issued directly by their OpenID Provider are allowed here.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI support has been disabled at this site.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>No association store has been given but is required for the current configuration.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>The property {0} had unexpected value {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>No identifier has been set.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>This property value is not supported by this control.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>This is already a PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Sorry.  This site only accepts OpenIDs that are HTTPS-secured, but {0} is not a secure Identifier.</value>
+	</data>
+	<data name="BadExtension" xml:space="preserve">
+		<value>The {0} extension failed to deserialize and will be skipped.  {1}</value>
+	</data>
+	<data name="PositiveAssertionFromNonQualifiedProvider" xml:space="preserve">
+		<value>An positive OpenID assertion was received from OP endpoint {0} and was rejected based on this site's security settings.</value>
+	</data>
+	<data name="HeadTagMustIncludeRunatServer" xml:space="preserve">
+		<value>The HTML head tag must include runat="server".</value>
+	</data>
+	<data name="PropertyNotSet" xml:space="preserve">
+		<value>The {0} property must be set first.</value>
+	</data>
+	<data name="X509CertificateNotTrusted" xml:space="preserve">
+		<value>The X.509 certificate used to sign this document is not trusted.</value>
+	</data>
+	<data name="ClaimedIdentifierDefiesDotNetNormalization" xml:space="preserve">
+		<value>This OpenID exploits features that this relying party cannot reliably verify.  Please try logging in with a human-readable OpenID or from a different OpenID Provider.</value>
+	</data>
+	<data name="MissingElement" xml:space="preserve">
+		<value>Missing {0} element.</value>
+	</data>
+	<data name="DiffieHellmanAssociationRequired" xml:space="preserve">
+		<value>The associate request instance must be a Diffie-Hellman instance.</value>
+	</data>
+	<data name="InvalidDSig" xml:space="preserve">
+		<value>Invalid XmlDSig signature on XRDS document.</value>
+	</data>
+	<data name="MisdirectedSigningCertificate" xml:space="preserve">
+		<value>X.509 signing certificate issued to {0}, but a certificate for {1} was expected.</value>
+	</data>
+	<data name="PopupRedirectMissingResponse" xml:space="preserve">
+		<value>OpenID popup window or iframe did not recognize an OpenID response in the request.</value>
+	</data>
+	<data name="UnsupportedCanonicalizationMethod" xml:space="preserve">
+		<value>Unrecognized or missing canonicalization method.</value>
+	</data>
+	<data name="UnsupportedSignatureMethod" xml:space="preserve">
+		<value>Unrecognized or missing signature method.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>No current HttpContext was detected, so an {0} instance must be explicitly provided or specified in the .config file.  Call the constructor overload that takes an {0}.</value>
+	</data>
+	<data name="ClientIdentifierLooksLikeResourceOwnerName" xml:space="preserve">
+		<value>Client Identifier starts with a resource owner prefix.  Authorization aborted.</value>
+	</data>
+	<data name="InvalidAccessToken" xml:space="preserve">
+		<value>Invalid access token.</value>
+	</data>
+	<data name="MissingAccessToken" xml:space="preserve">
+		<value>Missing access token.</value>
+	</data>
+	<data name="ResourceOwnerNameLooksLikeClientIdentifier" xml:space="preserve">
+		<value>Resource owner username starts with a client prefix.  Authorization aborted.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>The configuration-specified type {0} must be public, and is not.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>The configuration XAML reference to {0} requires a current HttpContext to resolve.</value>
+	</data>
+	<data name="EmbeddedResourceUrlProviderRequired" xml:space="preserve">
+		<value>The current IHttpHandler is not one of types: {0}.  An embedded resource URL provider must be set in your .config file.</value>
+	</data>
+	<data name="EmptyStringNotAllowed" xml:space="preserve">
+		<value>The empty string is not allowed.</value>
+	</data>
+	<data name="InvalidArgument" xml:space="preserve">
+		<value>The argument has an unexpected value.</value>
+	</data>
+	<data name="RequiredPropertyNotYetPreset" xml:space="preserve">
+		<value>The property {0} must be set before this operation is allowed.</value>
+	</data>
+	<data name="ResponseBodyNotSupported" xml:space="preserve">
+		<value>This object contains a response body, which is not supported.</value>
+	</data>
+	<data name="HostFactoriesRequired" xml:space="preserve">
+		<value>The HostFactories property must be set first.</value>
+	</data>
+	<data name="Generic_CryptoFailure" xml:space="preserve">
+		<value>The provided data could not be decrypted. If the current application is deployed in a web farm configuration, ensure that the 'decryptionKey' and 'validationKey' attributes are explicitly specified in the &lt;machineKey&gt; configuration section.</value>
+	</data>
+	<data name="DeletedWebApplication" xml:space="preserve">
+		<value>Web application '{0}' deleted.</value>
+	</data>
+	<data name="MismatchingArrayLengths" xml:space="preserve">
+		<value>The {0} and {1} properties must be set to arrays of equal length.</value>
+	</data>
+	<data name="NoMatchingWebSiteFound" xml:space="preserve">
+		<value>No web site with the name '{0}' found.</value>
+	</data>
+	<data name="PackingJsFile" xml:space="preserve">
+		<value>Packing javascript resource "{0}" into "{1}".</value>
+	</data>
+	<data name="SkipPackingJsFile" xml:space="preserve">
+		<value>Skip packing "{0}" because its packed version is up to date.</value>
+	</data>
+	<data name="WebApplicationNotFoundSoNotDeleted" xml:space="preserve">
+		<value>Web application '{0}' was not found, so it was not deleted.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.sr.resx b/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.sr.resx
index 8e2d09a..1ebd80a 100644
--- a/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.sr.resx
+++ b/src/DotNetOpenAuth.OpenId/Xrds/XrdsStrings.sr.resx
@@ -1,6 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <root>
-  <!-- 
+	<!-- 
     Microsoft ResX Schema 
     
     Version 2.0
@@ -59,74 +59,516 @@
             : using a System.ComponentModel.TypeConverter
             : and then encoded with base64 encoding.
     -->
-  <xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
-    <xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
-    <xsd:element name="root" msdata:IsDataSet="true">
-      <xsd:complexType>
-        <xsd:choice maxOccurs="unbounded">
-          <xsd:element name="metadata">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" />
-              </xsd:sequence>
-              <xsd:attribute name="name" use="required" type="xsd:string" />
-              <xsd:attribute name="type" type="xsd:string" />
-              <xsd:attribute name="mimetype" type="xsd:string" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="assembly">
-            <xsd:complexType>
-              <xsd:attribute name="alias" type="xsd:string" />
-              <xsd:attribute name="name" type="xsd:string" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="data">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-                <xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
-              <xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
-              <xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
-              <xsd:attribute ref="xml:space" />
-            </xsd:complexType>
-          </xsd:element>
-          <xsd:element name="resheader">
-            <xsd:complexType>
-              <xsd:sequence>
-                <xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
-              </xsd:sequence>
-              <xsd:attribute name="name" type="xsd:string" use="required" />
-            </xsd:complexType>
-          </xsd:element>
-        </xsd:choice>
-      </xsd:complexType>
-    </xsd:element>
-  </xsd:schema>
-  <resheader name="resmimetype">
-    <value>text/microsoft-resx</value>
-  </resheader>
-  <resheader name="version">
-    <value>2.0</value>
-  </resheader>
-  <resheader name="reader">
-    <value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <resheader name="writer">
-    <value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
-  </resheader>
-  <data name="CIDVerificationFailed" xml:space="preserve">
+	<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
+		<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
+		<xsd:element name="root" msdata:IsDataSet="true">
+			<xsd:complexType>
+				<xsd:choice maxOccurs="unbounded">
+					<xsd:element name="metadata">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" />
+							</xsd:sequence>
+							<xsd:attribute name="name" use="required" type="xsd:string" />
+							<xsd:attribute name="type" type="xsd:string" />
+							<xsd:attribute name="mimetype" type="xsd:string" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="assembly">
+						<xsd:complexType>
+							<xsd:attribute name="alias" type="xsd:string" />
+							<xsd:attribute name="name" type="xsd:string" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="data">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+								<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
+							<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
+							<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
+							<xsd:attribute ref="xml:space" />
+						</xsd:complexType>
+					</xsd:element>
+					<xsd:element name="resheader">
+						<xsd:complexType>
+							<xsd:sequence>
+								<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
+							</xsd:sequence>
+							<xsd:attribute name="name" type="xsd:string" use="required" />
+						</xsd:complexType>
+					</xsd:element>
+				</xsd:choice>
+			</xsd:complexType>
+		</xsd:element>
+	</xsd:schema>
+	<resheader name="resmimetype">
+		<value>text/microsoft-resx</value>
+	</resheader>
+	<resheader name="version">
+		<value>2.0</value>
+	</resheader>
+	<resheader name="reader">
+		<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<resheader name="writer">
+		<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
+	</resheader>
+	<data name="CIDVerificationFailed" xml:space="preserve">
     <value>XRI CanonicalID provera neuspešna.</value>
   </data>
-  <data name="InvalidXRDSDocument" xml:space="preserve">
+	<data name="InvalidXRDSDocument" xml:space="preserve">
     <value>Greška u obradi XRDS dokumenta.</value>
   </data>
-  <data name="MissingCanonicalIDElement" xml:space="preserve">
+	<data name="MissingCanonicalIDElement" xml:space="preserve">
     <value>XRDS dokumentu za XRI {0} nedostaje neophodni CanonicalID element.</value>
   </data>
-  <data name="XriResolutionStatusMissing" xml:space="preserve">
+	<data name="XriResolutionStatusMissing" xml:space="preserve">
     <value>Ne može se pronaći XRI resolution Status tag ili je code attribute neispravan.</value>
   </data>
+	<data name="PpidProviderNotGiven" xml:space="preserve">
+		<value>Nijedan PPID provajder nije konfigurisan.</value>
+	</data>
+	<data name="ArgumentPropertyMissing" xml:space="preserve">
+		<value>Svojstvo {0}.{1} argumenta je neophodno, ali je ono prazno ili nepostojeće.</value>
+	</data>
+	<data name="CurrentHttpContextRequired" xml:space="preserve">
+		<value>HttpContext.Current je nepostojeći.  Mora postojati ASP.NET zahtev u procesu da bi ova operacija bila uspešna.</value>
+	</data>
+	<data name="DataContractMissingFromMessageType" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0}.  Da li nedostaje [DataContract] atribut?</value>
+	</data>
+	<data name="DataContractMissingNamespace" xml:space="preserve">
+		<value>DataContractSerializer se ne može inicijalizovati na tipu poruke {0} jer svojstvo DataContractAttribute.Namespace property nije podešeno.</value>
+	</data>
+	<data name="DerivedTypeNotExpected" xml:space="preserve">
+		<value>Instanca tipa {0} je bila očekivana, a primljena je neočekivana izvedena instanca tipa {1}.</value>
+	</data>
+	<data name="DirectedMessageMissingRecipient" xml:space="preserve">
+		<value>Svojstvo Recipient usmerene poruke ne sme biti nepostojeće.</value>
+	</data>
+	<data name="DirectWebRequestOptionsNotSupported" xml:space="preserve">
+		<value>Dati set opcija nije podržan od strane.</value>
+	</data>
+	<data name="ErrorDeserializingMessage" xml:space="preserve">
+		<value>Greška prilikom deserijalizacije poruke {0}.</value>
+	</data>
+	<data name="ErrorInRequestReplyMessage" xml:space="preserve">
+		<value>Greška se desila tokom slanja usmerene poruke ili tokom primanja odgovora.</value>
+	</data>
+	<data name="ExceptionNotConstructedForTransit" xml:space="preserve">
+		<value>Ovaj izuzetak nije napravljen sa početnom porukom koja ga je izazvala.</value>
+	</data>
+	<data name="ExpectedMessageNotReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} a primljena poruka nije prepoznata.</value>
+	</data>
+	<data name="ExpiredMessage" xml:space="preserve">
+		<value>Poruka ističe u {0} a sada je {1}.</value>
+	</data>
+	<data name="GetOrPostFlagsRequired" xml:space="preserve">
+		<value>Bar jedan od GET ili POST flegova mora biti prisutan.</value>
+	</data>
+	<data name="HttpContextRequired" xml:space="preserve">
+		<value>Ovaj metod zahteva tekući HttpContext. Kao alternativa, koristite preklopljeni metod koji dozvoljava da se prosledi informacija bez HttpContext-a.</value>
+	</data>
+	<data name="IndirectMessagesMustImplementIDirectedProtocolMessage" xml:space="preserve">
+		<value>Poruke koje ukazuju na indirektni transport moraju implementirati {0} interfejs.</value>
+	</data>
+	<data name="InsecureWebRequestWithSslRequired" xml:space="preserve">
+		<value>Nebezbedan web zahtev za '{0}' prekinut zbog bezbednosnih zahteva koji zahtevaju HTTPS.</value>
+	</data>
+	<data name="InsufficientMessageProtection" xml:space="preserve">
+		<value>Poruka {0} je zahtevala zaštite {{{1}}} ali prenosni kanal nije mogao primeniti {{{2}}}.</value>
+	</data>
+	<data name="InvalidCustomBindingElementOrder" xml:space="preserve">
+		<value>Redosled prilagođenih vezujućih elemenata je neispravan.</value>
+	</data>
+	<data name="InvalidMessageParts" xml:space="preserve">
+		<value>Neki deo ili delovi poruke imaju nevalidne vrednosti: {0}</value>
+	</data>
+	<data name="InvalidNonceReceived" xml:space="preserve">
+		<value>Primljena poruka imala je neispravan ili nedostajući jedinstveni identifikator.</value>
+	</data>
+	<data name="KeyAlreadyExists" xml:space="preserve">
+		<value>Element sa istom vrednošću ključa je već dodat.</value>
+	</data>
+	<data name="MessageNotExtensible" xml:space="preserve">
+		<value>Poruka {0} ne podržava ekstenzije.</value>
+	</data>
+	<data name="MessagePartEncoderWrongType" xml:space="preserve">
+		<value>Vrednost za {0}.{1} člana {1} je trebala da bude izvedena od  {2} ali je izvedena od {3}.</value>
+	</data>
+	<data name="MessagePartReadFailure" xml:space="preserve">
+		<value>Greška prilikom čitanja poruke '{0}' parametar '{1}' sa vrednošću '{2}'.</value>
+	</data>
+	<data name="MessagePartValueBase64DecodingFault" xml:space="preserve">
+		<value>Parametar poruke '{0}' sa vrednošću '{1}' nije se base64-dekodovao.</value>
+	</data>
+	<data name="MessagePartWriteFailure" xml:space="preserve">
+		<value>Greška prilikom pripremanja poruke '{0}' parametra '{1}' za slanje.</value>
+	</data>
+	<data name="QueuedMessageResponseAlreadyExists" xml:space="preserve">
+		<value>Poruka-odgovor je već u redu za slanje u stream-u za odgovore.</value>
+	</data>
+	<data name="ReplayAttackDetected" xml:space="preserve">
+		<value>Ova poruka je već obrađena.  Ovo može ukazivati na replay napad u toku.</value>
+	</data>
+	<data name="ReplayProtectionNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava replay zaštitu.</value>
+	</data>
+	<data name="RequiredNonEmptyParameterWasEmpty" xml:space="preserve">
+		<value>Sledeći zahtevani parametri koji ne smeju biti prazni su bili prazni u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredParametersMissing" xml:space="preserve">
+		<value>Sledeći zahtevani parametri nedostaju u {0} poruke: {1}</value>
+	</data>
+	<data name="RequiredProtectionMissing" xml:space="preserve">
+		<value>Povezujući element koji nudi {0} zaštitu zahteva drugu zaštitu koja nije ponuđena.</value>
+	</data>
+	<data name="SequenceContainsNoElements" xml:space="preserve">
+		<value>Lista je prazna.</value>
+	</data>
+	<data name="SequenceContainsNullElement" xml:space="preserve">
+		<value>Lista sadrži prazan (null) element.</value>
+	</data>
+	<data name="SignatureInvalid" xml:space="preserve">
+		<value>Potpis poruke je neispravan.</value>
+	</data>
+	<data name="SigningNotSupported" xml:space="preserve">
+		<value>Ovaj kanal ne podržava potpisivanje poruka. Da bi podržao potpisivanje poruka, izvedeni tip Channel mora preklopiti Sign i IsSignatureValid metode.</value>
+	</data>
+	<data name="StreamUnreadable" xml:space="preserve">
+		<value>Svojstvo stream-a CanRead je vratilo false.</value>
+	</data>
+	<data name="StreamUnwritable" xml:space="preserve">
+		<value>Svojstvo stream-a CanWrite je vratilo false.</value>
+	</data>
+	<data name="TooManyBindingsOfferingSameProtection" xml:space="preserve">
+		<value>Očekivano je da najviše 1 povezujući element primeni zaštitu {0}, ali je više njih primenjeno.</value>
+	</data>
+	<data name="TooManyRedirects" xml:space="preserve">
+		<value>Maksimalno dozvoljeni broj redirekcija je prekoračen u toku zahtevanja '{0}'.</value>
+	</data>
+	<data name="UnexpectedEmptyArray" xml:space="preserve">
+		<value>Niz ne sme biti prazan.</value>
+	</data>
+	<data name="UnexpectedEmptyString" xml:space="preserve">
+		<value>Prazan string nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedMessagePartValue" xml:space="preserve">
+		<value>Parametar poruke '{0}' ima neočekivanu '{1}'.</value>
+	</data>
+	<data name="UnexpectedMessagePartValueForConstant" xml:space="preserve">
+		<value>Očekivano je da od poruke {0} parametar '{1}' ima vrednost '{2}' ali je imao vrednost '{3}'.</value>
+	</data>
+	<data name="UnexpectedMessageReceived" xml:space="preserve">
+		<value>Očekivana je poruka {0} ali je umesto nje primljena {1}.</value>
+	</data>
+	<data name="UnexpectedMessageReceivedOfMany" xml:space="preserve">
+		<value>Poruka neočekivanog tipa je primljena.</value>
+	</data>
+	<data name="UnexpectedNullKey" xml:space="preserve">
+		<value>null ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullOrEmptyKey" xml:space="preserve">
+		<value>null ili prazan ključ je uključen a nije dozvoljen.</value>
+	</data>
+	<data name="UnexpectedNullValue" xml:space="preserve">
+		<value>null vrednost je uključena za ključ '{0}' a nije dozvoljena.</value>
+	</data>
+	<data name="UnexpectedType" xml:space="preserve">
+		<value>Tip {0} ili izvedeni tip je očekivan, a dat je {1}.</value>
+	</data>
+	<data name="UnrecognizedEnumValue" xml:space="preserve">
+		<value>{0} svojstvo ima nepoznatu vrednost {1}.</value>
+	</data>
+	<data name="UnsafeWebRequestDetected" xml:space="preserve">
+		<value>URL '{0}' je rangiran kao nebezbedan i ne može se zahtevati na ovaj način.</value>
+	</data>
+	<data name="UntrustedRedirectsOnPOSTNotSupported" xml:space="preserve">
+		<value>Redirekcije na POST zahteve usmerene ka serverima kojima se ne veruje nisu podržane.</value>
+	</data>
+	<data name="WebRequestFailed" xml:space="preserve">
+		<value>Web zahtev za '{0}' nije uspeo.</value>
+	</data>
+	<data name="ExceptionUndeliverable" xml:space="preserve">
+		<value>Ovaj izuzetak mora se kreirati zajedno sa primaocem koji će primiti poruku o grešci ili sa instancom poruke direktnog zahteva na koju će ovaj izuzetak odgovoriti.</value>
+	</data>
+	<data name="UnsupportedHttpVerbForMessageType" xml:space="preserve">
+		<value>'{0}' poruka ne može biti primljeno sa HTTP glagolom '{1}'.</value>
+	</data>
+	<data name="UnexpectedHttpStatusCode" xml:space="preserve">
+		<value>Neočekivani HTTP statusni kod {0} {1} primljen u direktnom odgovoru.</value>
+	</data>
+	<data name="UnsupportedHttpVerb" xml:space="preserve">
+		<value>HTTP glagol '{0}' je neprepoznat i nije podržan.</value>
+	</data>
+	<data name="AccessTokenNotAuthorized" xml:space="preserve">
+		<value>Ne može se poslati pristupni token za Consumera za token zahteva '{0}' pre nego što bude autorizovan.</value>
+	</data>
+	<data name="BadAccessTokenInProtectedResourceRequest" xml:space="preserve">
+		<value>Pristupni token '{0}' je neispravan ili je mu je istekao rok važenja.</value>
+	</data>
+	<data name="ConsumerOrTokenSecretNotFound" xml:space="preserve">
+		<value>Greška u traženju šifre za korisnika ili za token.</value>
+	</data>
+	<data name="IncorrectVerifier" xml:space="preserve">
+		<value>oauth_verifier argument je neispravan.</value>
+	</data>
+	<data name="InvalidIncomingMessage" xml:space="preserve">
+		<value>Neispravna OAuth poruka je primljena i odbačena.</value>
+	</data>
+	<data name="MessageNotAllowedExtraParameters" xml:space="preserve">
+		<value>Poruka {0} je sadržala višak podataka koji nije dozvoljen.</value>
+	</data>
+	<data name="MinimumConsumerVersionRequirementNotMet" xml:space="preserve">
+		<value>Ovaj provajder OAuth usluge zahteva od OAuth korisnika da da implementira OAuth {0}, ali izgleda da korisnika podržava jedino {1}.</value>
+	</data>
+	<data name="OpenIdOAuthExtensionRequiresSpecialTokenManagerInterface" xml:space="preserve">
+		<value>Korišćenje OpenID+OAuth ekstenzije zahteva da token menadžer koji se koristi implementira {0} interfejs.</value>
+	</data>
+	<data name="OpenIdOAuthRealmConsumerKeyDoNotMatch" xml:space="preserve">
+		<value>OpenID Relying Party domen nije prepoznat kao da pripada OAuth Consumeru identifikovanom po datom korisničkom tokenu.</value>
+	</data>
+	<data name="RequestUrlMustNotHaveOAuthParameters" xml:space="preserve">
+		<value>URL upit zahteva NE SME sadržati bilo kakve OAuth Protocol Parametre.</value>
+	</data>
+	<data name="SigningElementAlreadyAssociatedWithChannel" xml:space="preserve">
+		<value>Potpisujući element je već asociran sa kanalom.</value>
+	</data>
+	<data name="SigningElementsMustShareSameProtection" xml:space="preserve">
+		<value>Svi elementi za potpisivanje moraju nuditi istu zaštitu poruke.</value>
+	</data>
+	<data name="TokenNotFound" xml:space="preserve">
+		<value>Token u poruci nije prepoznat od strane provajdera usluge.</value>
+	</data>
+	<data name="X509CertificateNotProvidedForSigning" xml:space="preserve">
+		<value>RSA-SHA1 potpisujući povezujući element nije podešen sa sertifikatom za potpisivanje.</value>
+	</data>
+	<data name="AbsoluteUriRequired" xml:space="preserve">
+		<value>Absolutni URI je zahtevan za ovu vrednost.</value>
+	</data>
+	<data name="AssociationSecretAndTypeLengthMismatch" xml:space="preserve">
+		<value>Dužina deljene tajne ({0}) ne slaže se sa dužinom zahtevanom od povezujućeg tipa ('{1}').</value>
+	</data>
+	<data name="AssociationSecretHashLengthMismatch" xml:space="preserve">
+		<value>Dužina šifrovane deljene tajne ({0}) ne slaže se sa dužinom hashing algoritma ({1}).</value>
+	</data>
+	<data name="AssociationStoreRequiresNonceStore" xml:space="preserve">
+		<value>Ako je dato povezujuće skladište, jedinstveni identifikator skladišta takođe mora biti prisutan.</value>
+	</data>
+	<data name="BadAssociationPrivateData" xml:space="preserve">
+		<value>Dostavljeni privatni podaci ne slažu se ni sa jednim poznatim Association tipom.  Dužina im je možda prekratka ili su podaci neispravni.</value>
+	</data>
+	<data name="CallbackArgumentsRequireSecretStore" xml:space="preserve">
+		<value>Callback argumenti su podržani jedino kada je {0} dustupan za {1}.</value>
+	</data>
+	<data name="CallDeserializeBeforeCreateResponse" xml:space="preserve">
+		<value>Simple Registration zahtev može generisati odgovor jedino na prijemnoj strani.</value>
+	</data>
+	<data name="ClaimedIdAndLocalIdMustBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.claimed_id i openid.identity parametri moraju istovremeno biti prisutni ili nedostajati.</value>
+	</data>
+	<data name="ClaimedIdentifierCannotBeSetOnDelegatedAuthentication" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo ne može se podesiti kada IsDelegatedIdentifier ima vrednost true da bi se izbeglo narušavanje OpenID URL delegiranja.</value>
+	</data>
+	<data name="ClaimedIdentifierMustBeSetFirst" xml:space="preserve">
+		<value>ClaimedIdentifier svojstvo se najpre mora podesiti.</value>
+	</data>
+	<data name="DiffieHellmanRequiredPropertiesNotSet" xml:space="preserve">
+		<value>Sledeća svojstva moraju biti podešena pre nego što Diffie-Hellmanov algoritam može generisati javni ključ: {0}</value>
+	</data>
+	<data name="ExplicitHttpUriSuppliedWithSslRequirement" xml:space="preserve">
+		<value>URI nije SSL a svojstvo requireSslDiscovery je podešeno na true.</value>
+	</data>
+	<data name="ExtensionAlreadyAddedWithSameTypeURI" xml:space="preserve">
+		<value>Prostor deljenja proširenja '{0}' je već dodat. Samo jedno proširenje po prostoru je dozvoljeno u datom zahtevu.</value>
+	</data>
+	<data name="ExtensionLookupSupportUnavailable" xml:space="preserve">
+		<value>Ne može se tražiti podrška za proširenja na rehidriranom ServiceEndpoint.</value>
+	</data>
+	<data name="FragmentNotAllowedOnXRIs" xml:space="preserve">
+		<value>Segmenti fragmenta se ne primenjuju na XRI identifikatore.</value>
+	</data>
+	<data name="IdentifierSelectRequiresMatchingIdentifiers" xml:space="preserve">
+		<value>ClaimedIdentifier i LocalIdentifier moraju biti isti kada IsIdentifierSelect ima vrednost true.</value>
+	</data>
+	<data name="IndirectErrorFormattedMessage" xml:space="preserve">
+		<value>{0} (Kontakt: {1}, Referenca: {2})</value>
+	</data>
+	<data name="InvalidCharacterInKeyValueFormInput" xml:space="preserve">
+		<value>Ne može se enkodovati '{0}' jer sadrži nevalidan znak za Key-Value Form enkodiranje.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidKeyValueFormCharacterMissing" xml:space="preserve">
+		<value>Ne može se dekodovati Key-Value Form jer je pronađena linija bez  '{0}' znaka.  (linija {1}: '{2}')</value>
+	</data>
+	<data name="InvalidScheme" xml:space="preserve">
+		<value>Šema mora biti http ili https a bila je '{0}'.</value>
+	</data>
+	<data name="InvalidUri" xml:space="preserve">
+		<value>Vrednost '{0}' nije validan URI.</value>
+	</data>
+	<data name="InvalidXri" xml:space="preserve">
+		<value>Nije prepoznat XRI format'.</value>
+	</data>
+	<data name="IssuedAssertionFailsIdentifierDiscovery" xml:space="preserve">
+		<value>OpenID Provider dao je iskaz za Identifier čije se informacije o pronalaženju ne slažu. 
+Informacije o krajnoj tački iskaza: 
+{0}
+Informacije o otkrivenoj krajnjoj tački:
+{1}</value>
+	</data>
+	<data name="KeysListAndDictionaryDoNotMatch" xml:space="preserve">
+		<value>Lista ključeva se ne slaže sa ponuđenim rečnikom.</value>
+	</data>
+	<data name="MatchingArgumentsExpected" xml:space="preserve">
+		<value>Parametri '{0}' i '{1}' moraju oba biti ili ne smeju oba biti '{2}'.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByLength" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanom dužinom {0}.</value>
+	</data>
+	<data name="NoAssociationTypeFoundByName" xml:space="preserve">
+		<value>Ni jedan prepoznati tip asociranja se ne uklapa sa zahtevanim imenom '{0}'.</value>
+	</data>
+	<data name="NoEncryptionSessionRequiresHttps" xml:space="preserve">
+		<value>Osim ako se ne koristi enkripcija transportnog sloja, "no-encryption" NE SME biti korišćen.</value>
+	</data>
+	<data name="NoSessionTypeFound" xml:space="preserve">
+		<value>Diffie-Hellman sesija tipa '{0}' nije pronađena za OpenID {1}.</value>
+	</data>
+	<data name="OpenIdEndpointNotFound" xml:space="preserve">
+		<value>Nijedna OpenID krajnja tačka nije pronađena.</value>
+	</data>
+	<data name="OperationOnlyValidForSetupRequiredState" xml:space="preserve">
+		<value>Ova operacija je jedino dozvoljena kada je IAuthenticationResponse.State == AuthenticationStatus.SetupRequired.</value>
+	</data>
+	<data name="ProviderVersionUnrecognized" xml:space="preserve">
+		<value>Nije moguće utvrditi verziju OpenID protokola implementiranog od strane Provider-a na krajnjoj tački '{0}'.</value>
+	</data>
+	<data name="RealmCausedRedirectUponDiscovery" xml:space="preserve">
+		<value>HTTP zahtev ka URL-u domena ({0}) rezultovao je redirekcijom, koja nije dozvoljena u togu pronalaženja Relying Party.</value>
+	</data>
+	<data name="ReturnToNotUnderRealm" xml:space="preserve">
+		<value>return_to '{0}' nije unutar domena '{1}'.</value>
+	</data>
+	<data name="ReturnToParamDoesNotMatchRequestUrl" xml:space="preserve">
+		<value>{0} parametar ({1}) se ne slaže sa trenutnim URL ({2}) sa kojim je zahtev napravljen.</value>
+	</data>
+	<data name="ReturnToRequiredForResponse" xml:space="preserve">
+		<value>openid.return_to parametar je neophodan u poruci zahteva da bi se konstruisao odgovor, ali ovaj parametar nedostaje.</value>
+	</data>
+	<data name="SignatureDoesNotIncludeMandatoryParts" xml:space="preserve">
+		<value>Sledeći parametri nisu uključeni u potpis a moraju da budu: {0}</value>
+	</data>
+	<data name="SregInvalidBirthdate" xml:space="preserve">
+		<value>Neispravna vrednost za datum rođenja.  Mora biti u formi gggg-MM-dd.</value>
+	</data>
+	<data name="TypeMustImplementX" xml:space="preserve">
+		<value>Tip mora implementirati {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowedFrom1xOPs" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane 1.0 OpenID Providers.</value>
+	</data>
+	<data name="UserSetupUrlRequiredInImmediateNegativeResponse" xml:space="preserve">
+		<value>openid.user_setup_url parametar je neophodan prilikom slanja negativnih poruka sa iskazima prilikom odgovaranja na zahteve u trenutnom modu.</value>
+	</data>
+	<data name="XriResolutionFailed" xml:space="preserve">
+		<value>XRI razrešivanje neuspešno.</value>
+	</data>
+	<data name="AttributeAlreadyAdded" xml:space="preserve">
+		<value>Atribut sa URI tipom '{0}' je već dodat.</value>
+	</data>
+	<data name="AttributeTooManyValues" xml:space="preserve">
+		<value>Samo {0} vrednosti za atribut '{1}' su zahtevane, ali {2} su ponuđene.</value>
+	</data>
+	<data name="UnspecifiedDateTimeKindNotAllowed" xml:space="preserve">
+		<value>Prosleđivanje objekta tipa DateTime čije svojstvo Kind ima vrednost Unspecified nije dozvoljeno.</value>
+	</data>
+	<data name="AssociationOrSessionTypeUnrecognizedOrNotSupported" xml:space="preserve">
+		<value>Zahtevani tip asocijacije '{0}' sa sesijom tipa '{1}' nije prepoznat ili nije podržan od strane ovog Provider-a  zbog bezbedonosnih zahteva.</value>
+	</data>
+	<data name="IncompatibleAssociationAndSessionTypes" xml:space="preserve">
+		<value>Provider je zahtevao asocijaciju tipa '{0}' i sesiju tipa '{1}', koje nisu međusobno kompatibilne.</value>
+	</data>
+	<data name="CreateRequestAlreadyCalled" xml:space="preserve">
+		<value>Zahtev za autentifikacijom je već kreiran korišćenjem CreateRequest().</value>
+	</data>
+	<data name="OpenIdTextBoxEmpty" xml:space="preserve">
+		<value>Nijedan OpenID url nije ponuđen.</value>
+	</data>
+	<data name="ClientScriptExtensionPropertyNameCollision" xml:space="preserve">
+		<value>Ekstenzija sa svojstvom ovog imena ('{0}') je već registrovana.</value>
+	</data>
+	<data name="ClientScriptExtensionTypeCollision" xml:space="preserve">
+		<value>Ekstenzija '{0}' je već registrovana.</value>
+	</data>
+	<data name="NotSupportedByAuthenticationSnapshot" xml:space="preserve">
+		<value>Ova operacija nije podržana od strane serijalizovanih odgovora za autentifikaciju. Pokušati ovu operaciju iz LoggedIn handler-a događaja.</value>
+	</data>
+	<data name="NoRelyingPartyEndpointDiscovered" xml:space="preserve">
+		<value>Nijedan XRDS dokument koji sadrži informaciju o OpenID Relying Party krajnjoj tački nije pronadjen u {0}.</value>
+	</data>
+	<data name="UnsolicitedAssertionForUnrelatedClaimedIdentifier" xml:space="preserve">
+		<value>Nezahtevani iskaz ne može biti poslat za navedeni identifikator {0} jer ovo nije autorizovani Provider za taj identifikator.</value>
+	</data>
+	<data name="MaximumAuthenticationTimeExpired" xml:space="preserve">
+		<value>Maksimalno dozvoljeno vreme za kompletiranje autentifikacije je isteklo. Molimo pokušajte ponovo.</value>
+	</data>
+	<data name="PrivateRPSecretNotFound" xml:space="preserve">
+		<value>Ne može se pronaći tajna za potpisivanje od strane handle-a '{0}'.</value>
+	</data>
+	<data name="ResponseNotReady" xml:space="preserve">
+		<value>Odgovor nije spreman.  Koristiti najpre IsResponseReady za proveru da li je odgovor spreman.</value>
+	</data>
+	<data name="UnsupportedChannelConfiguration" xml:space="preserve">
+		<value>Ovo svojstvo nije dostupno zbog nepoznate konfiguracije kanala.</value>
+	</data>
+	<data name="IdentityAndClaimedIdentifierMustBeBothPresentOrAbsent" xml:space="preserve">
+		<value>openid.identity i openid.claimed_id parametri moraju istovremeno biti prisutna ili istovremeno odsutna u poruci.</value>
+	</data>
+	<data name="ReturnToRequiredForOperation" xml:space="preserve">
+		<value>Svojstvo ReturnTo ne sme biti null da bi se podržala ova operacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionRejectionRequiresNonceStore" xml:space="preserve">
+		<value>Odbijanje nezahtevanih iskaza zahteva skladište jedinstvenih identifikatora i skladište asocijacija.</value>
+	</data>
+	<data name="UnsolicitedAssertionsNotAllowed" xml:space="preserve">
+		<value>Nezahtevani iskazi nisu dozvoljeni od strane ovog Relying Party.</value>
+	</data>
+	<data name="DelegatingIdentifiersNotAllowed" xml:space="preserve">
+		<value>Samo OpenID-jevi izdati direktno od strane njihovog OpenID Provider-a su ovde dozvoljeni.</value>
+	</data>
+	<data name="XriResolutionDisabled" xml:space="preserve">
+		<value>XRI podrška je onemogućena na ovom sajtu.</value>
+	</data>
+	<data name="AssociationStoreRequired" xml:space="preserve">
+		<value>Skladište asocijacija nije dato a zahtevano je za trenutnu konfiguraciju.</value>
+	</data>
+	<data name="UnexpectedEnumPropertyValue" xml:space="preserve">
+		<value>Svojstvo {0} je imalo neočekivanu vrednost {1}.</value>
+	</data>
+	<data name="NoIdentifierSet" xml:space="preserve">
+		<value>Ni jedan identifikator nije podešen.</value>
+	</data>
+	<data name="PropertyValueNotSupported" xml:space="preserve">
+		<value>Ova vrednost svojstva nije podržana od strane ove kontrole.</value>
+	</data>
+	<data name="ArgumentIsPpidIdentifier" xml:space="preserve">
+		<value>Ovo je već PPID Identifier.</value>
+	</data>
+	<data name="RequireSslNotSatisfiedByAssertedClaimedId" xml:space="preserve">
+		<value>Žao nam je.  Ovaj sajt jedino prihvata OpenID-jeve koji su HTTPS-bezbedni, a {0} nije bezbedni Identifier.</value>
+	</data>
+	<data name="StoreRequiredWhenNoHttpContextAvailable" xml:space="preserve">
+		<value>Tekući HttpContext nije detektovan, tako da {0} instanca mora biti eksplicitno postavljena ili specificirana u .config fajlu.  Pozvati preklopljeni konstruktor koji uzima parametar {0}.</value>
+	</data>
+	<data name="ConfigurationTypeMustBePublic" xml:space="preserve">
+		<value>Konfiguraciono zavisni tip {0} mora biti javan, a on to nije.</value>
+	</data>
+	<data name="ConfigurationXamlReferenceRequiresHttpContext" xml:space="preserve">
+		<value>Konfiguraciona XAML referenca na {0} zahteva da se trenutni HttpContext razreši.</value>
+	</data>
 </root>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenId/packages.config b/src/DotNetOpenAuth.OpenId/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OpenId/packages.config
+++ b/src/DotNetOpenAuth.OpenId/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenIdOAuth/DotNetOpenAuth.OpenIdOAuth.csproj b/src/DotNetOpenAuth.OpenIdOAuth/DotNetOpenAuth.OpenIdOAuth.csproj
index a219f0b..2f70761 100644
--- a/src/DotNetOpenAuth.OpenIdOAuth/DotNetOpenAuth.OpenIdOAuth.csproj
+++ b/src/DotNetOpenAuth.OpenIdOAuth/DotNetOpenAuth.OpenIdOAuth.csproj
@@ -5,6 +5,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
+    <NuGetPackageImportStamp>8b6387e7</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -56,15 +57,17 @@
   <ItemGroup>
     <Reference Include="System.Net.Http" />
     <Reference Include="System.Net.Http.Extensions">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.Primitives">
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.15\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Validation.2.0.2.13022\lib\portable-windows8+net40+sl5+windowsphone8\Validation.dll</HintPath>
+      <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
     </Reference>
   </ItemGroup>
   <ItemGroup>
@@ -74,9 +77,11 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureBclBuildImported" BeforeTargets="BeforeBuild" Condition="'$(BclBuildImported)' == ''">
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=317567." HelpKeyword="BCLBUILD2001" />
-    <Error Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.10\tools\Microsoft.Bcl.Build.targets')" Text="The build restored NuGet packages. Build the project again to include these packages in the build. For more information, see http://go.microsoft.com/fwlink/?LinkID=317568." HelpKeyword="BCLBUILD2002" />
+  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
+  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
+    <PropertyGroup>
+      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
+    </PropertyGroup>
+    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.OpenIdOAuth/packages.config b/src/DotNetOpenAuth.OpenIdOAuth/packages.config
index d7c8c89..cb15128 100644
--- a/src/DotNetOpenAuth.OpenIdOAuth/packages.config
+++ b/src/DotNetOpenAuth.OpenIdOAuth/packages.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.3" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.10" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.15" targetFramework="net45" />
-  <package id="Validation" version="2.0.2.13022" targetFramework="net45" />
+  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
+  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
+  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
+  <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
 </packages>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Test/App.config b/src/DotNetOpenAuth.Test/App.config
index 16f07fc..b2e5092 100644
--- a/src/DotNetOpenAuth.Test/App.config
+++ b/src/DotNetOpenAuth.Test/App.config
@@ -61,12 +61,4 @@
 	<system.diagnostics>
 		<assert assertuienabled="false"/>
 	</system.diagnostics>
-	<runtime>
-		<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-			<dependentAssembly>
-				<assemblyIdentity name="System.Net.Http.Formatting" publicKeyToken="31BF3856AD364E35" culture="neutral"/>
-				<bindingRedirect oldVersion="0.0.0.0-5.0.0.0" newVersion="5.0.0.0"/>
-			</dependentAssembly>
-		</assemblyBinding>
-	</runtime>
 </configuration>
diff --git a/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj b/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj
index 590fc12..e6ad9b7 100644
--- a/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj
+++ b/src/DotNetOpenAuth.Test/DotNetOpenAuth.Test.csproj
@@ -6,7 +6,7 @@
     <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
     <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
     <SolutionDir Condition="$(SolutionDir) == '' Or $(SolutionDir) == '*Undefined*'">..\</SolutionDir>
-    <NuGetPackageImportStamp>1dd2ad2f</NuGetPackageImportStamp>
+    <NuGetPackageImportStamp>21a885ee</NuGetPackageImportStamp>
   </PropertyGroup>
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.props" />
   <PropertyGroup>
@@ -80,23 +80,7 @@
     <Reference Include="System.Core">
       <RequiredTargetFramework>3.5</RequiredTargetFramework>
     </Reference>
-    <Reference Include="System.Data" />
-    <Reference Include="System.Data.DataSetExtensions">
-      <RequiredTargetFramework>3.5</RequiredTargetFramework>
-    </Reference>
     <Reference Include="System.Net.Http" />
-    <Reference Include="System.Net.Http.Extensions, Version=2.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Extensions.dll</HintPath>
-    </Reference>
-    <Reference Include="System.Net.Http.Formatting, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\..\bin\v4.5\Debug\System.Net.Http.Formatting.dll</HintPath>
-    </Reference>
-    <Reference Include="System.Net.Http.Primitives, Version=4.2.28.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=MSIL">
-      <SpecificVersion>False</SpecificVersion>
-      <HintPath>..\packages\Microsoft.Net.Http.2.2.28\lib\net45\System.Net.Http.Primitives.dll</HintPath>
-    </Reference>
     <Reference Include="System.Net.Http.WebRequest" />
     <Reference Include="System.Runtime.Serialization">
       <RequiredTargetFramework>3.0</RequiredTargetFramework>
@@ -107,9 +91,6 @@
     <Reference Include="System.ServiceModel.Web" />
     <Reference Include="System.Web" />
     <Reference Include="System.Xml" />
-    <Reference Include="System.Xml.Linq">
-      <RequiredTargetFramework>3.5</RequiredTargetFramework>
-    </Reference>
     <Reference Include="Validation, Version=2.0.0.0, Culture=neutral, PublicKeyToken=2fc06f0d701809a7, processorArchitecture=MSIL">
       <SpecificVersion>False</SpecificVersion>
       <HintPath>..\packages\Validation.2.0.6.15003\lib\portable-net40+sl50+win+wpa81+wp80+Xamarin.iOS10+MonoAndroid10+MonoTouch10\Validation.dll</HintPath>
@@ -318,18 +299,10 @@
     <EmbeddedResource Include="OpenId\Discovery\htmldiscovery\html20provWithBadXrds.html" />
   </ItemGroup>
   <ItemGroup>
-    <ProjectReference Include="..\DotNetOpenAuth.Core.UI\DotNetOpenAuth.Core.UI.csproj">
-      <Project>{173E7B8D-E751-46E2-A133-F72297C0D2F4}</Project>
-      <Name>DotNetOpenAuth.Core.UI</Name>
-    </ProjectReference>
     <ProjectReference Include="..\DotNetOpenAuth.Core\DotNetOpenAuth.Core.csproj">
       <Project>{60426312-6AE5-4835-8667-37EDEA670222}</Project>
       <Name>DotNetOpenAuth.Core</Name>
     </ProjectReference>
-    <ProjectReference Include="..\DotNetOpenAuth.OAuth.Common\DotNetOpenAuth.OAuth.Common.csproj">
-      <Project>{115217c5-22cd-415c-a292-0dd0238cdd89}</Project>
-      <Name>DotNetOpenAuth.OAuth.Common</Name>
-    </ProjectReference>
     <ProjectReference Include="..\DotNetOpenAuth.OAuth.Consumer\DotNetOpenAuth.OAuth.Consumer.csproj">
       <Project>{B202E40D-4663-4A2B-ACDA-865F88FF7CAA}</Project>
       <Name>DotNetOpenAuth.OAuth.Consumer</Name>
@@ -342,10 +315,6 @@
       <Project>{99BB7543-EA16-43EE-A7BC-D7A25A3B22F6}</Project>
       <Name>DotNetOpenAuth.OAuth2.AuthorizationServer</Name>
     </ProjectReference>
-    <ProjectReference Include="..\DotNetOpenAuth.OAuth2.Client.UI\DotNetOpenAuth.OAuth2.Client.UI.csproj">
-      <Project>{ADC2CC8C-541E-4F86-ACB1-DD504A36FA4B}</Project>
-      <Name>DotNetOpenAuth.OAuth2.Client.UI</Name>
-    </ProjectReference>
     <ProjectReference Include="..\DotNetOpenAuth.OAuth2.ClientAuthorization\DotNetOpenAuth.OAuth2.ClientAuthorization.csproj">
       <Project>{CCF3728A-B3D7-404A-9BC6-75197135F2D7}</Project>
       <Name>DotNetOpenAuth.OAuth2.ClientAuthorization</Name>
@@ -366,10 +335,6 @@
       <Project>{A288FCC8-6FCF-46DA-A45E-5F9281556361}</Project>
       <Name>DotNetOpenAuth.OAuth</Name>
     </ProjectReference>
-    <ProjectReference Include="..\DotNetOpenAuth.OpenId.Provider.UI\DotNetOpenAuth.OpenId.Provider.UI.csproj">
-      <Project>{9D0F8866-2131-4C2A-BC0E-16FEA5B50828}</Project>
-      <Name>DotNetOpenAuth.OpenId.Provider.UI</Name>
-    </ProjectReference>
     <ProjectReference Include="..\DotNetOpenAuth.OpenId.Provider\DotNetOpenAuth.OpenId.Provider.csproj">
       <Project>{F8284738-3B5D-4733-A511-38C23F4A763F}</Project>
       <Name>DotNetOpenAuth.OpenId.Provider</Name>
@@ -382,22 +347,10 @@
       <Project>{F458AB60-BA1C-43D9-8CEF-EC01B50BE87B}</Project>
       <Name>DotNetOpenAuth.OpenId.RelyingParty</Name>
     </ProjectReference>
-    <ProjectReference Include="..\DotNetOpenAuth.OpenId.UI\DotNetOpenAuth.OpenId.UI.csproj">
-      <Project>{75E13AAE-7D51-4421-ABFD-3F3DC91F576E}</Project>
-      <Name>DotNetOpenAuth.OpenId.UI</Name>
-    </ProjectReference>
-    <ProjectReference Include="..\DotNetOpenAuth.OpenIdOAuth\DotNetOpenAuth.OpenIdOAuth.csproj">
-      <Project>{4bfaa336-5df3-4f27-82d3-06d13240e8ab}</Project>
-      <Name>DotNetOpenAuth.OpenIdOAuth</Name>
-    </ProjectReference>
     <ProjectReference Include="..\DotNetOpenAuth.OpenId\DotNetOpenAuth.OpenId.csproj">
       <Project>{3896A32A-E876-4C23-B9B8-78E17D134CD3}</Project>
       <Name>DotNetOpenAuth.OpenId</Name>
     </ProjectReference>
-    <ProjectReference Include="..\Mono.Math\Mono.Math.csproj">
-      <Project>{F4CD3C04-6037-4946-B7A5-34BFC96A75D2}</Project>
-      <Name>Mono.Math</Name>
-    </ProjectReference>
     <ProjectReference Include="..\Org.Mentalis.Security.Cryptography\Org.Mentalis.Security.Cryptography.csproj">
       <Project>{26DC877F-5987-48DD-9DDB-E62F2DE0E150}</Project>
       <Name>Org.Mentalis.Security.Cryptography</Name>
@@ -407,11 +360,4 @@
   <Import Project="$(ProjectRoot)tools\DotNetOpenAuth.targets" />
   <Import Project="$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))\EnlistmentInfo.targets" Condition=" '$([MSBuild]::GetDirectoryNameOfFileAbove($(MSBuildProjectDirectory), EnlistmentInfo.targets))' != '' " />
   <Import Project="$(SolutionDir)\.nuget\nuget.targets" />
-  <Import Project="..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets" Condition="Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" />
-  <Target Name="EnsureNuGetPackageBuildImports" BeforeTargets="PrepareForBuild">
-    <PropertyGroup>
-      <ErrorText>This project references NuGet package(s) that are missing on this computer. Enable NuGet Package Restore to download them.  For more information, see http://go.microsoft.com/fwlink/?LinkID=322105. The missing file is {0}.</ErrorText>
-    </PropertyGroup>
-    <Error Condition="!Exists('..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets')" Text="$([System.String]::Format('$(ErrorText)', '..\packages\Microsoft.Bcl.Build.1.0.21\build\Microsoft.Bcl.Build.targets'))" />
-  </Target>
 </Project>
\ No newline at end of file
diff --git a/src/DotNetOpenAuth.Test/Messaging/MessagingTestBase.cs b/src/DotNetOpenAuth.Test/Messaging/MessagingTestBase.cs
index ea39397..6bc4ab7 100644
--- a/src/DotNetOpenAuth.Test/Messaging/MessagingTestBase.cs
+++ b/src/DotNetOpenAuth.Test/Messaging/MessagingTestBase.cs
@@ -107,7 +107,7 @@ namespace DotNetOpenAuth.Test {
 				message.Age = 15;
 			}
 			if (fill >= FieldFill.AllRequired) {
-			    message.Timestamp = DateTime.ParseExact("09/09/2008 08:00", "dd/MM/yyyy hh:mm", CultureInfo.InvariantCulture);
+				message.Timestamp = DateTime.ParseExact("09/09/2008 08:00", "dd/MM/yyyy hh:mm", CultureInfo.InvariantCulture);
 			}
 			if (fill >= FieldFill.CompleteBeforeBindings) {
 				message.Name = "Andrew";
diff --git a/src/DotNetOpenAuth.Test/Messaging/MessagingUtilitiesTests.cs b/src/DotNetOpenAuth.Test/Messaging/MessagingUtilitiesTests.cs
index 11fdfd0..0a49473 100644
--- a/src/DotNetOpenAuth.Test/Messaging/MessagingUtilitiesTests.cs
+++ b/src/DotNetOpenAuth.Test/Messaging/MessagingUtilitiesTests.cs
@@ -220,10 +220,10 @@ namespace DotNetOpenAuth.Test.Messaging {
 		[Test]
 		public void DeserializeFromJson() {
 			var message = new TestMessageWithDate();
-            string json = "{\"ts\":\"2012-04-28T08:00:00Z\",\"age\":18,\"Name\":\"Andrew\"}";
+			string json = "{\"ts\":\"2012-04-28T08:00:00Z\",\"age\":18,\"Name\":\"Andrew\"}";
 			MessagingUtilities.DeserializeFromJson(Encoding.UTF8.GetBytes(json), message, this.MessageDescriptions);
 			Assert.That(message.Age, Is.EqualTo(18));
-            Assert.That(message.Timestamp, Is.EqualTo(DateTime.ParseExact("28/04/2012 08:00", "dd/MM/yyyy hh:mm", CultureInfo.InvariantCulture)));
+			Assert.That(message.Timestamp, Is.EqualTo(DateTime.ParseExact("28/04/2012 08:00", "dd/MM/yyyy hh:mm", CultureInfo.InvariantCulture)));
 			Assert.That(message.Name, Is.EqualTo("Andrew"));
 		}
 
diff --git a/src/DotNetOpenAuth.Test/OpenId/Messages/IndirectSignedResponseTests.cs b/src/DotNetOpenAuth.Test/OpenId/Messages/IndirectSignedResponseTests.cs
index ae1b115..23e9864 100644
--- a/src/DotNetOpenAuth.Test/OpenId/Messages/IndirectSignedResponseTests.cs
+++ b/src/DotNetOpenAuth.Test/OpenId/Messages/IndirectSignedResponseTests.cs
@@ -95,7 +95,7 @@ namespace DotNetOpenAuth.Test.OpenId.Messages {
 			responseReplay.UtcCreationDate = local;
 			DateTime utcCreationDate = responseReplay.UtcCreationDate;
 			Assert.AreEqual(DateTimeKind.Utc, utcCreationDate.Kind, "Local time should have been converted to universal time.");
-            //Assert.AreNotEqual(local.Hour, utcCreationDate.Hour, "The hour was expected to change (unless local time _is_ UTC time for this PC!)");
+			//Assert.AreNotEqual(local.Hour, utcCreationDate.Hour, "The hour was expected to change (unless local time _is_ UTC time for this PC!)");
 
 			// Now try setting UTC time just to make sure it DOESN'T mangle the hour
 			if (this.creationDate.Kind != DateTimeKind.Utc) {
diff --git a/src/DotNetOpenAuth.Test/TestUtilities.cs b/src/DotNetOpenAuth.Test/TestUtilities.cs
index f56a408..a52cde9 100644
--- a/src/DotNetOpenAuth.Test/TestUtilities.cs
+++ b/src/DotNetOpenAuth.Test/TestUtilities.cs
@@ -5,13 +5,13 @@
 //-----------------------------------------------------------------------
 
 namespace DotNetOpenAuth.Test {
-    using System.Collections.Specialized;
+	using System.Collections.Specialized;
 
-    using DotNetOpenAuth.Logging;
+	using DotNetOpenAuth.Logging;
 
-    using Validation;
+	using Validation;
 
-    /// <summary>
+	/// <summary>
 	/// An assortment of methods useful for testing.
 	/// </summary>
 	internal static class TestUtilities {
diff --git a/src/DotNetOpenAuth.Test/packages.config b/src/DotNetOpenAuth.Test/packages.config
index dee9206..a11f102 100644
--- a/src/DotNetOpenAuth.Test/packages.config
+++ b/src/DotNetOpenAuth.Test/packages.config
@@ -1,8 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Microsoft.Bcl" version="1.1.9" targetFramework="net45" />
-  <package id="Microsoft.Bcl.Build" version="1.0.21" targetFramework="net45" />
-  <package id="Microsoft.Net.Http" version="2.2.28" targetFramework="net45" />
   <package id="Moq" version="4.2.1409.1722" targetFramework="net45" />
   <package id="NUnit" version="2.6.4" targetFramework="net45" />
   <package id="Validation" version="2.0.6.15003" targetFramework="net45" />
diff --git a/src/DotNetOpenAuth.sln b/src/DotNetOpenAuth.sln
index 13bc853..832f5bd 100644
--- a/src/DotNetOpenAuth.sln
+++ b/src/DotNetOpenAuth.sln
@@ -127,6 +127,13 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "OAuth2ProtectedWebApi", "..
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DotNetOpenAuth.Mvc", "DotNetOpenAuth.Mvc\DotNetOpenAuth.Mvc.csproj", "{9D308EF2-2712-4F83-A14C-18BF08D45526}"
 EndProject
+Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = ".nuget", ".nuget", "{4F1C8041-7A79-46F5-B1B7-688DC85DD400}"
+	ProjectSection(SolutionItems) = preProject
+		.nuget\NuGet.Config = .nuget\NuGet.Config
+		.nuget\NuGet.exe = .nuget\NuGet.exe
+		.nuget\NuGet.targets = .nuget\NuGet.targets
+	EndProjectSection
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		CodeAnalysis|Any CPU = CodeAnalysis|Any CPU