1.0.0-beta.24

• Adding defined avatar support.

1.0.0-beta.23

• See disabled users in setup app.
• Allow auth token to be passed in a HTTP header, rather than just a cookie.
• Correctly report failed password change attempts.
• Delete the generated primary group is the user being registered can't be created.

1.0.0-beta.22

• Fixed hook method name.

1.0.0-beta.21

• Fix validation blocking creation of users/groups.

1.0.0-beta.20

• Fix docblocks.
• Added acRead, acWrite, and acFull properties and controls.
• Changed DELETE_ACCESS to FULL_ACCESS.
• Validate AC properties on save.
• AC properties are now only editable by users with FULL_ACCESS

1.0.0-beta.19

• Fix exception on invalid JWT token.

1.0.0-beta.18

• Don't require XSRF token for setup app. Also remove pubsub requirement.

1.0.0-beta.17

• Use JSON Web Token (JWT), instead of PHP sessions.
• Move descendant group logic into User class.
• Protect against CSRF (XSRF) attacks. Ready for PubSub support.
• Allow updateDataProtection to accept a user other than "currentUser".

1.0.0-beta.16

• Fixed setup app.

1.0.0-beta.15

• Update uMailPHP.