Kinto

-------------------

**Security fix**

- Fix permission checking with POST on plural endpoints (fixes 2459)

**Bug fixes**

- Apply CORS headers to EOL responses (2452)

**Internal Changes**

- Remove ``auth`` parameter from postgresql/memory storage backends
- Removed pytest-sugar

-------------------

**Bug fixes**

- History entries datetimes now carry timezone information
- Fix ``kinto init`` command (2375)
- Fix float strings parsing in certain URL query parameters. (2392)

**Internal Changes**

- Upgrade kinto-admin to v1.26.1
- Drop ``auth`` parameter from storage backend methods.

-------------------

**Bug fixes**

- Second attempt at fixing loading of Kinto Admin (2322)

-------------------

**Bug fixes**

- Fix loading of Kinto Admin (2320)

-------------------

**New Features**

- Add ``Content-Security-Policy`` header and report URI (fixes 2303)

**Internal Changes**

- Use package-lock file for Kinto Admin packaging
- Use isort for formatting imports (Fixes 2270)

-------------------

**Internal changes**

- Add a warning when using the accounts plugin with the memory backend. (fixes 2258)
- Upgrade kinto-admin to v1.25.1