NOJIRA Remove obsolete CanvasAuth routes
CLC-4009 Block token changes when indirectly authenticated
Merge pull request #2734 from raydavis/raywip

CLC-4009 Block token changes when indirectly authenticated