Fixed ssh key vulnerability.

There was an issue where if a specially crafted ssh public key was submitted
to the system it would allow the user to ssh into tunnel@tmux.me with a full
shell account. Specifically the scenario was if you public key with a partial
key followed by newline or carriage return and an full valid key would do
this. The reason this happened was that it was applying the authorized_keys
command restrictions to the partial key which is invalid and therefore script
and because the newline/carriage return the valid key that follows was being
written to the authorized_keys file without the command restriction.
Added fix for ssh cmd vuln to changelog.

I did this so that people would know about it in the next release and so that
the person that notified me about it would get credit.
Merge branch 'fix_server_ssh_cmd_vuln'
Bumped version to v1.0.1