Missing token in websocket/auth returns a 400
Unauth user support for ACLs
Merge remote-tracking branch 'origin/diffquery3' into diffquery
ids and query in the diff/start frame
Fix bug where public user acl didn't work
Fix username type of the unauth user
channel test