fiat 0.42.1

fix(authn): invalidatePermission from cache

During login we want to read a fresh view of the permission
from fiat to support populating allowed accounts headers.

Also some cleanup in FiatAuthenticationConfig for easier autoconfigging.