Redirect domain protection
Header auth
Refresh tokens
Bug fixes