- #147 improved CREST API error logging (WIP) - improved SSO controller (removed access_token from public endpoints)