add auth0 production config vars
fix dependency issue with jwt gem on heroku
remove custom config from initializer
use config for whole domain instead of just username
change env var name
change name of client secret
be sure to user auth0_domain instead of auth0_username
expire sessions
add link to user profile via user image in top right
make profiles claimable
fix bug on org public profile