v0.25.0

• Added two privileges for one-time-token use: a12n:one-time-token:generate and a12n-one-time-token:exchange, these both required the admin privilege. Theres no bc break here as the original admin privilege still covers these new ones.
• It wasn't possible to see a full principal even if a user had a12n:principal:list privilege.
• Added new privilege for changing passwords: a12n:user:change-password.
• Introspection endpoint now returns the exp, sub, aud and iss properties.
• Now returning a 422 for invalid passwords instead of 500.