release 1.8.0

Features

• upgrade to lua-resty-session >= 4.x; see #489; thanks @oldium @balajiv113
• add support for handling JWTs returned from the userinfo endpoint; closes ##345; thanks @realnate

Security

• fix cross-tenant requests; see #526

Bugfixes

• don't return a zero-pixel image in logout for Firefox 128 and later; see #521
• when looking for a bearer token an exception occured if the Authorization header didn't contain any space character; see #473