v1.13.6

Changed

• Update docs for getIdTokenClaims and getUser #690 (adamjmcgrath)
• [SDK-2238] Only use timeout promise when using fetchWithTimeout without a worker #689 (frederikprijck)
• Do not use AbortController in the worker if not available #679 (stevehobbsdev)
• Do not send useCookiesForTransactions to authorize request #673 (frederikprijck)

Fixed

• Remove the nonce check in handleRedirectCallback #678 (stevehobbsdev)

Security

• Update wait-on to solve security vulnerability #687 (frederikprijck)
• [Security] Bump ini from 1.3.5 to 1.3.7 #672 (dependabot-preview[bot])