Frederic Jung

This allows for joining channels you're invited to.

[security] Whats the point of Screen authentication

6

When receiving a list of all active authentication tokens through an **unauthenticated** request to the `/screens.{xml,json}` Reproduce: `curl http://concerto/screens.json` Vector: Taking over screens, the player of a screen, leaking all...

Fixes #1369