Update CHANGELOG.md

CHANGELOG.md

@@ -1,22 +1,27 @@
 Unreleased:
-	- Added changelog
-	- Set default redirect URI resolver strict matching to true
-	- Fixed XSS vulnerability on redirect URI display on approval page
+- Added changelog
+- Set default redirect URI resolver strict matching to true
+- Fixed XSS vulnerability on redirect URI display on approval page
+- Removed MITRE from copyright
+- Disallow unsigned JWTs on client authentication
+- Upgraded Nimbus revision
+- Added French translation
+- Added hooks for custom JWT claims
 
 *1.3.1*:
-	- Added End Session endpoint
-	- Fixed discovery endpoint
-	- Downgrade MySQL connector dependency version from developer preview to GA release
+- Added End Session endpoint
+- Fixed discovery endpoint
+- Downgrade MySQL connector dependency version from developer preview to GA release
 
 *1.3.0*:
-	- Added device flow support
-	- Added PKCE support
-	- Modularized UI to allow better overlay and extensions
-	- Modularized data import/export API
-	- Added software statements to dynamic client registration
-	- Added assertion processing framework
-	- Removed ID tokens from storage
-	- Removed structured scopes
+- Added device flow support
+- Added PKCE support
+- Modularized UI to allow better overlay and extensions
+- Modularized data import/export API
+- Added software statements to dynamic client registration
+- Added assertion processing framework
+- Removed ID tokens from storage
+- Removed structured scopes
 
 *1.2.6*: 
-	- Added string HEART compliance mode
+- Added strict HEART compliance mode