bugfixes: - SSO page allows any form-action in CSP now improvements: - use 38c3 design for error pages - API: add event's location free text field in JSON
