implicit integration test verifies state pass through
Update the readme
fix: configure express correctly when running server integration tests
feature: client restricted to configured allowed scopes