HTTP responses now include default security headers if not otherwise set.
Adds modal popup when running a Hytale server that requires additional auth.
Adds support for administrators to view any application API key that has been created, regardless of the owning account.
Changed
SFTP sessions are now revoked on nodes when a user changes their password or their account is deleted.
Remote node access tokens are now scoped to only allow access to servers that belong to the same node. Previously a node could access information and control the installation status for any server in the system.
The default rate limit for the client API was bumped from 128 to 256 requests per minute.