features are

• Add a new token handle mechanism as TokenAccessor (thanks @Otann)
  • User can define a custom handler, for example using X-Authentication header instead of cookie.
• Add user and authority parameters into authorizationFaild. (thanks @samco)