3.222.1 (2026-09-16) Bug Fixes close websocket authentication holes and authenticate OAuth2 tokens on the socket (#3900) (200572d), closes #3893