This makes commands such as /set work before you connect.

This is no longer necessary since we use "pre-wrap" in the CSS.

The distinction is not likely to be useful, and it doesn't make
sense in all cases.

This may be useful to get around network blocks in some cases.

Some devices only support the Constrained Baseline profile.

This must be larger than the samplebuilder's MaxLate.

It turns out that the bandwidth limitation is not effective
in Firefox when the rid is set unless we're simulcasting.

Firefox doesn't include the rid in the statistics result.
Use the SSID instead.

Firefox uses a non-standard protocol for simulcast, which has been
supported by Pion for a while now.  Enable simulcast in Firefox.

Thanks to Miroslav36.

Our tokens are not revocable, they should not be generated with
a large lifetime.  Don't encourage users to do that.

We had two functions with the same name.

This avoids the need to pass the username in the URL without
requiring the client to parse tokens.

Now that we support external auth, the permissions list is
open-ended.  Make it a list for simplicity.

It is now possible to autojoin by going to a URL such as

  https://galene.example.org/group/test?username=jch&token=...

This makes it possible to use token authentication without
an authentication server.