| ⇢ | A | PasswordLoginForbidden added |
| ⇢ | A | PasswordLoginForbidden::serialize() added | |
| ⇢ | A | PasswordLoginForbidden::getHTTPCode() added | |
| A | ↘ | B | CORSMiddleware::beforeController() got worse |
| A | ↘ | B | Session::tryBasicAuthLogin() got worse |
| A | ↘ | B | Auth::validateUserPass() got worse |