Allow authorization header for CORS requests.
Avoid leaking file handle when getting derived data from FastZipPackage.
When adding DataServicePackage, download it ourselves to avoid leaving turds in AppData.
Bump version.
Tweak User route mapping so it all works.
Bump version for patch.
Add methods to UsersController.

- ChangeApiKey
- Return 409 Conflict on Put or Post and renaming to existing user
Tab completion shows versions available from origin too.
Add overload of Search that accepts parameter object.

- Add filtering by local or mirrored packages
- Add sort field and direction
Make PackageServiceStreamProvider injectable and easier to subclass.
Bump version.