anonymous auth support, better error responses, bugfixes for handling of service failures, bugfixes for handling of empty http body on service-level errors