Update to 0.9.10, fixing a user impersonation attack. PR: 206707 Submitted by: Anton Shestakov MFH: 2016Q1