- Make hijacking via POST a default requirement
- Introduce a setting `HIJACK_ALLOW_GET_REQUESTS`
- Move Django admin integration to a separate package as it depends on GET (https://github.com/arteria/django-hijack-admin)
- **If you currently use the admin integration, follow the instructions there when upgrading**
- The setting `HIJACK_DISPLAY_ADMIN_BUTTON` is not used anymore.
- Pass request to signals
- Tests for custom decorators