Release 2.1.1

Bug fixes and a security hardening of the OAuth flow:
- Use the refreshed access token in REST requests.
- Add an anti-CSRF state token to the OAuth authorize flow.
- Recognise BaseFieldOverride fields in mapping selects.
- Guard against missing entities, contact data and empty API results.
- Add unit and functional test coverage for the above.