v0.1.322

What's Changed

• A project server spends only its own org's model key, and its profile turns features off by @fryanpan in #1354
• A cross-origin socket ignores the reader's cookie, the widget's socket carries its token, and attach_app cannot repoint a doc by @fryanpan in #1355

Full Changelog: v0.1.321...v0.1.322