Added 1.3 hint
only expand credentials to meta if settings.auth is set
Fixed 'auth.fields' mapping, however, all 3 fields are still required.
Display 'auth.fields' as-received in meta, but use default class/user/apikey struct internally.
Added "its a fork" warning.
fixed inactive "catchredir". beforeRedirect should return $url, not just "true"
updated README
fixed an abort() loop if 'onlyActiveWithAuth' is enabled
added 'warnInactive' - toggle warning feedback in 'onlyActiveWithAuth' scenarios