auth_key for heartbeat and minor changes for distro clients

also minor changes for json set user state