0.5.1

Fixing a few glitches we let out with 0.5.0!

Added

• Basic Authentication and HMAC Authentication plugins now also send the X-Credential-Username to the upstream server.
• Admin API now accept JSON when receiving a CORS request. #580
• Add a WWW-Authenticate header for HTTP 401 responses for basic-auth and key-auth. #588

Changed

• Protect Kong from POODLE SSL attacks by omitting SSLv3 (CVE-2014-3566). #563
• Remove support for key-auth key in body. #566

Fixed

• Plugins
  • HMAC
    • The migration for this plugin is now correctly being run. #611
    • Wrong username doesn't return HTTP 500 anymore, but 403. #602
  • JWT: iss not being found doesn't return HTTP 500 anymore, but 403. #578
  • OAuth2: client credentials flow does not include a refresh token anymore. #562
• Fix an occasional error when updating a plugin without a config. #571