v2.5.2

Bug Fixes

• write odc-cli's stored token readable by its owner only (8d5e642)
• api: validate a remote submission before creating its session (a5174d7)
• api: file a remote session under the assignment's own group (5ae4b60)
• api: keep patients' submissions out of the synchronizer's logs (24378a7)
• gateway: bound the assignment id the verification route stores (d15a4e9)
• api: check the caller may update an assignment before cancelling it (96cb228)
• api: stop returning an assignment's private key when it is created (e8a9729)
• generate the .env file readable by its owner only (c32430d)
• api: cap a gateway synchronization pass at five minutes (43b7888)
• api: scope the group and user a new session names to the caller (d6966cf)
• api: delete the sessions a batch inserted when their read-back fails (aeb0f0f)
• api: drop the subject read-back and fail loudly on a session read-back gap (9a40e2c)
• api: stop gateway synchronizations from overlapping (a45c97f)

Performance

• api: batch session creation and scope the upload response (24e3775)