OSC/ondemand v1.5.6

version 1.5.6 (backported from OnDemand 1.7)

on GitHub

Fixed

• update Shell app to v1.5.0 which has
  backported fix for adding CSRF protection via CSRF token and Origin checking when creating shell app
  websocket connection #444
• Other Shell app fixes released in OnDemand 1.6 v1.4.2 to v1.4.8 diff