Merge pull request #5159 from oswaldoacauan/security-improv

bigbluebutton-html5/imports/api/acl/Acl.js

...l5/imports/api/users/server/handlers/validateAuthToken.js

bigbluebutton-html5/imports/api/users/server/methods.js

...ton-html5/imports/api/users/server/methods/userLeaving.js

...tton-html5/imports/api/users/server/methods/userLogout.js

...ml5/imports/api/users/server/methods/validateAuthToken.js

...on-html5/imports/api/users/server/modifiers/removeUser.js

...ml5/imports/api/users/server/modifiers/setConnectionId.js

bigbluebutton-html5/imports/api/users/server/publishers.js

bigbluebutton-html5/imports/startup/client/auth.js

bigbluebutton-html5/imports/startup/client/routes.js

bigbluebutton-html5/imports/ui/components/app/container.jsx

bigbluebutton-html5/imports/ui/services/auth/index.js