Bug fix point release
This release fixes a couple of bugs, most importantly authentication could be bypassed when the server had never been restarted after initial setup. More details are coming in a security advisory being prepared by @crazygolem, but if you can't promptly install this bug fix version, you can simply restart your server and you are clear.
Many thanks for @crazygolem for researching and finding this bug.