v1.3.0

New

• session.Guard.Identify(ctx, request): the middleware's session lookup without a response writer, for long-lived connections such as a WebSocket re-validating the cookies of its upgrade request. It ends an expired impersonation, runs a due refresh and reports to the Observer exactly like RequireAPI; a refused refresh ends the session in the store and surfaces as the error. See Sessions. (#13)

No breaking changes.