v1.4.6

What has changed

Security patches (enforcing user rules more strictly than beforehand).

Respective PRs

These were hotfixes, so there are no corresponding PRs, however these commits are relevant:

• Add authorization to generic user list API
• update some gems for security
• refactor controller
• restrict user editing

Full Changelog: v1.4.5...v1.4.6