FIX: NPE during compile when an annotation is not used at appropriate level
FIX: always set/clear cookies on the same path
jetty: reorder dependencies to have servlet3 first in path
core shell: use dev mode by default in generated app
core: introduce WebException

similar to JAX-RS WebApplicationException, allow to throw an exception which allow controlling the HTTP response
security: introduce PermitAll and RolesAllowed

Now all endpoints are secured by default, you need to use @PermitAll to make them public
@RolesAllowed allow to control which roles are allowed to access an endpoint

Behind the scene the programatic API is much more powerful, allowing to define your own permissions and your security manager
factory: new priority parameter on @Module

as the name suggests it allows to set the priority of a module.
This can't easily be done at @Provides level because priorities are defined at machine level, not machine engine.
core: new priority parameter on @RestxResource
security: admin console

take advantage of new security mechanisms to secure the admin console
security: ask for admin password when generating app
security: introduce restx-security-basic module

extract what was first created in admin module in a separate module, allowing to implement simple authentication without requiring to use admin modules, and making it easier to override the behaviour.
[BREAKING] security: move RestxSession to restx.security package
security: add principal to RestxSession

the best way to access the current principal is now RestxSession.current().getPrincipal()
security: introduce sudoing feature for principals with restx-admin role
api-docs: allow to use new sudoing feature to send request as other principals
security: record su session

recording cookies doesn't work anymore, it records the main session, not the su one
now we record the su session, allowing to use the send & record feature of api-docs together with su feature.
security: take su into account in admin console 403 handling