Fix routing for /auth/development which should have been POST
Remove markup which discloses request.env for unsuccessful authentication

Among other potential problems, this was disclosing
action_dispatch.secret_token which is obviously supposed to be a secret
Bump version to 0.3.1
Merge release 0.3.1 into master