Added (auth) coordinate OAuth refreshes through credential stores (#1232) add request-state key rotation (#1128) Fixed keep initialize on legacy protocol versions (#1228) (transport) fall back after sessionless HTTP discover rejections (#1211) allow concurrent streamable http requests (#1186)