[1.18.1] Update kanboard to 1.2.56 Full Changelog fix(session): scope the session cookie to the directory without a trailing slash fix(security): validate and escape color IDs fix(security): select client IP from the rightmost untrusted hop fix(security): restrict dashboard tasks to authorized projects fix(security): project authorization bypass fix(security): preserve unscoped dashboard pagination fix(security): escape the project name in the analytic modal title fix(ldap): enable notifications for auto-created LDAP users fix(ical): only accept known columns as the calendar start date fix(api): return a full batch response when one request is forbidden