configuration option for unregistering. Moved expectation for client auth from payload to header.
fixed missing uid