v3.0.0

Changed

• eliminate authenticationSpecification method

Added

• allow authenticate method to "refresh" a token
• allow token to arrive on header, query, body

Fixed

• strip 'Bearer ' string from any authorization header