Protect UserController actions with role name. Add methods to get login info or force user to log in to retrieve info.
Upgrade to WebApi 5.0 and SignalR 2.0.
WebApi 5.0 is much better at including routes to ApiExplorer.
Make service resolution work correctly with SignalR 2.0.
Tweak action parameters to make api documentation more accurate.
Store user roles in Lucene index, add PackageManager role.
Conditionally enable SignalR CORS.