This release fixes some security issues.
A path traversal bug could let an adversary be authenticated without proper credentials. It's a semi-local exploit and hard to do, but it's an issue. I should get a CVE for this at some point, but github is taking forever.
Passwords are now expected to be in a different filename and hashed. There is an option to allow older plain text passwords, but I should have never done plain text passwords.
If you are using authentication, you should upgrade.