3.4.7 (2026-02-25) Bug Fixes api: check permission based on provided data on user update (61baf06) token-v2: compare subject to user id (f1b8848)