Critical Bugfix: disallow sending the auth tokenover plaintext.
Merge branch 'master' into develop