v0.1.5

Return a 401 for an invalid_grant (expired token)

v0.1.4

Added Access-Control-Allow-Origin header for error responses

v0.1.3

Always allow OPTIONS request regardless of token validity

v0.1.2

Nou traffic that has no authorization header also passes this middleware

v0.1.1

Fixed deserialize bug

v0.1.0

Initial release