Removed auto-confirmation of API Access app target URLs as it is a security issue. Addresses issue #139
Note that while not a breaking change to the functionality of an API Access app that has already been deployed, this change does affect the app development process in that the app will no longer automatically response to a registration request and therefore the callbacks state will remain PENDING until the user visits the URL printed to the server log.
[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[x] Breaking change (fix or feature that would cause existing functionality to change)
Removed auto-confirmation of API Access app target URLs as it is a security issue. Addresses issue #139
Note that while not a breaking change to the functionality of an API Access app that has already been deployed, this change does affect the app development process in that the app will no longer automatically response to a registration request and therefore the callbacks state will remain PENDING until the user visits the URL printed to the server log.