where unauthorized users could gain access to other users' jupyterhub accounts, if usernames are known.
Disabling the creation of new users with `c.FirstUseAuthenticator.create_users = False` mitigates this attack while waiting for upgrade.
Bugs fixed
- Revert authenticate being made sync from async [45](https://github.com/jupyterhub/firstuseauthenticator/pull/45) ([consideRatio](https://github.com/consideRatio))
- normalize username to lock password [38](https://github.com/jupyterhub/firstuseauthenticator/pull/38) ([georgejhunt](https://github.com/georgejhunt))
- Fix failure to await render_template [37](https://github.com/jupyterhub/firstuseauthenticator/pull/37) ([georgejhunt](https://github.com/georgejhunt))
- Fix bug where create_users and password requirement couldn't work together [33](https://github.com/jupyterhub/firstuseauthenticator/pull/33) ([saisiddhant12](https://github.com/saisiddhant12))
Maintenance and upkeep improvements
- Refactoring for readability [46](https://github.com/jupyterhub/firstuseauthenticator/pull/46) ([consideRatio](https://github.com/consideRatio))
- update package metadata to require Python 3.6 [41](https://github.com/jupyterhub/firstuseauthenticator/pull/41) ([minrk](https://github.com/minrk))
Documentation improvements
- Add GitHub CI badge to README [47](https://github.com/jupyterhub/firstuseauthenticator/pull/47) ([consideRatio](https://github.com/consideRatio))
Other merged PRs
- Update master to main [44](https://github.com/jupyterhub/firstuseauthenticator/pull/44) ([consideRatio](https://github.com/consideRatio))
- run tests on GHA [40](https://github.com/jupyterhub/firstuseauthenticator/pull/40) ([minrk](https://github.com/minrk))
Contributors to this release
([GitHub contributors page for this release](https://github.com/jupyterhub/firstuseauthenticator/graphs/contributors?from=2020-03-18&to=2021-10-26&type=c))
[consideRatio](https://github.com/search?q=repo%3Ajupyterhub%2Ffirstuseauthenticator+involves%3AconsideRatio+updated%3A2020-03-18..2021-10-26&type=Issues) | [georgejhunt](https://github.com/search?q=repo%3Ajupyterhub%2Ffirstuseauthenticator+involves%3Ageorgejhunt+updated%3A2020-03-18..2021-10-26&type=Issues) | [minrk](https://github.com/search?q=repo%3Ajupyterhub%2Ffirstuseauthenticator+involves%3Aminrk+updated%3A2020-03-18..2021-10-26&type=Issues) | [saisiddhant12](https://github.com/search?q=repo%3Ajupyterhub%2Ffirstuseauthenticator+involves%3Asaisiddhant12+updated%3A2020-03-18..2021-10-26&type=Issues)