diff --git a/CHANGELOG.rdoc b/CHANGELOG.rdoc
index 50eb3cfa..19f55cdb 100644
--- a/CHANGELOG.rdoc
+++ b/CHANGELOG.rdoc
@@ -8,6 +8,8 @@
 * bug fix
   * Fix a bug where configuration options were being included too late
   * Ensure Devise::TestHelpers can be used to tests Devise internal controllers (by github.com/jwilger)
+  * valid_password? should not choke on empty passwords (by github.com/mikel)
+  * downcase keys before validation
 
 * backward incompatible changes
   * authentication_keys are no longer considered when creating the e-mail validations, the previous behavior was buggy. You must double check if you were relying on such behavior.