Merge pull request #281 from alex/be-more-specific

Be more specific about when you can trust authentication on GCM