Update senecat-auth to 0.3.0
solves compat issue with seneca-crypto-sign
Properly extract token from path
avoid trailing slash