v0.1.6

Make /sub/{uuid} subscription endpoint public

The auth middleware was blocking subscription links which need to
be accessible without authentication (clients fetch subscriptions).
Add strings.HasPrefix("/sub/", ...) to public paths.
Add tests for public subscription endpoint and API login.