Client: add strict vendor checking option
Client: support no-more-sessions
Server: ensure authenticated before channel open
Client: make callback optional for some methods
readme: update to reflect recent changes