V2.1 New Providers

Upgrading from 2.0 should be transparent for most users. The format for specifying cookie secret has changed so some users may have a cookie be base64 decoded now and will have to re-generate a new cookie secret that matches the requirements for -pass-access-token.

New Providers:

• Azure #170 thanks @eelcocramer
• Gitlab #211 thanks @pmosbach
• Github Enterprise #197 #269
• Facebook #270

New Features:

• Restrict google apps authentication to specific google groups on your domain #139 thanks @jburnham
• Serve up static files directly #142 thanks @Tenzer
• Request Signing (for securing a publicly accessible endpoint) #147 thanks @mbland
• Nginx auth_request support #153 thanks @mbland
• Set basic-auth password for upstream requests #129 thanks @jburnham
• Set google approval prompt #131 thanks @ebardsley

Bug Fixes:

• Support base64 cookie secrets to make it possible to use completely random seed values #227 thanks @ploxiln @ntrepid8
• dist.sh compatability with GNU #249 thanks @jhoblitt
• Check email validity on all requests #126 thanks @tomtaylor mattk42
• Fix running on alternate URL prefixes #148 thanks @johnboxall
• Ignore spaces in authorized email list #184 thanks @stanhu
• Validate state param while redirecting #194 thanks @r4um
• Doc updates thanks @sricola @gust1n @rhencke @philips @mbland @funkymrrogers