Reordered changelog
Fixes #4889: Application was getting into redirect loop when user wasn't allowed accessing login page. Now shows 403