Application Password Tracking, REST API Hardening & Stability Fixes

• Fixed: Login redirect drops scheme and trailing slash, breaking sites behind a reverse proxy #506
• Fixed: Duplicated role settings #509
• Fixed: Undefined array key "user_id" warning in Service/Jwt.php line 224 #510
• Fixed: PHP Notice: Cannot access non-public member WP_Admin_Bar::$nodes #505
• Changed: Remove AAM Policy post type from REST API #511
• New: Add the ability to track application passwords per user #508