v1.4

Add packet spoof hardening when handling URL's. Previously, figuring out the IP of a trusted client allowed for attackers to spoof the source IP and open links remotely on the server potentially propagating malicious URL's to other clients. Efforts have been made to maintain basic backwards compatibility. A modern instance can still send links and media controls to a legacy instance, but links received from a legacy/unauthenticated instance are now ignored.