master If an avatar is not set, do not fetch it
master Strict mode on
master Moved wrapper into the main application
master Fixed login parameter
master Sysntax errors login provider and repository
master Fixed route matcher in auth token middleware
master Make user info forbidden for non authorised users
master Return a 401 response and do not do anything else