Doc update

Updated wording in the configuration path, the injected script now calls the path /InjectAuth/.

Added visible warning on front page when plugin is disabled

Added a visible warning on the website, when the plugin is disabled.

Added safety breaker / added better tooling in the configuration page.

Added safety breaker / added better tooling in the configuration page.

A new feature has been added to the plugin: safety breaker. When the server serves traffic without the correct HTTP Header, it will trip (if the safety breaker is enabled) and disable the plugin. This is intended to catch misconfiguration that could result in people gaining access to the server.
Note that when the breaker trip, it will be visible in the configuration page.

Also, the configuration page now shows up which user is currently logged in with the header that was last saved, this should help with debugging.
Alternatively, if the javascript wasn't injected in the index.html page, it will display a corresponding message.

Better login page detection

Better login page detection

Removed unused dependency

I kickstarted this project with another plugin, and I forgot to cleanup that project's dependency.

Initial release

1.0.0

here goes nothing