v0.19.6

This was a botched release, do not upgrade to this

v0.19.4

• Fix link to schema collection on home document.
• Add Curl to Docker image as it's a common health check tool.
• Fix a bug that preventing using PATCH on /group/:id in the HAL browser.

v0.19.3

• Make sure that the /health endpoint also gets logged correctly.

v0.19.2

• Fix: bug in JSON schema for group members. Inconsistent property
  names.
• Renamed userHref to memberHref.

v0.19.1

• Fix: bug in JSON schema for editing group members.
• @curveball/validator had a critical bug that caused error handling to break
  for validation errors.

v0.19.0

• Redesigned home page.
• A drastically smaller Docker image. The uncompressed image size dropped from
  1.2G to 267M due to the use of multi-stage builds.
• Apps now appear in /app and no longer in /user.
• Groups now appear in /group and no longer in /user.
• HAL forms for adding and removing members to groups.
• Renamed 'users' to 'principals' in many places in the source, including
  database tables.
• Clean up line endings from JWT_PRIVATE_KEY if they are not in the expected
  format. This will make it work better with at least AWS Secure Parameter
  Store / ECS / Lambda.
• First steps to integrating json-schema in a12nserver.

v0.18.3

• updatePassword now supports creating a password without having an
  existing password.

v0.18.2

• Activating users did not correctly check for "admin" privileges. This is
  now fixed.
• Added support for PUT on /users/123
• Allowing users to be activated using the token-exchange API.

v0.18.1

• Url decode the 'href' on the /user/byhref endpoint.
• Make the 'privilege policy' textarea bigger.

v0.18.0

• Added UIs for editing user information. (@mihok)
• Added preliminary support for JWT bearer tokens (draft-ietf-oauth-access-token-jwt-12).
• Added a new markdown-based home document, which will be a bit more user-
  friendly for non-devs.
• Added UI for setting privileges. (@mihok)
• All secret tokens are now URL-safe and generated non-blocking.
• Throw a 404 when trying to access the 'active sessions' page for a
  group-principal.