Update CHANGELOG.md

Author: jricher

CHANGELOG.md

@@ -1,22 +1,27 @@
 Unreleased:
-- Added changelog
-- Set default redirect URI resolver strict matching to true
-- Fixed XSS vulnerability on redirect URI display on approval page
+- Added changelog
+- Set default redirect URI resolver strict matching to true
+- Fixed XSS vulnerability on redirect URI display on approval page
+- Removed MITRE from copyright
+- Disallow unsigned JWTs on client authentication
+- Upgraded Nimbus revision
+- Added French translation
+- Added hooks for custom JWT claims
 
 *1.3.1*:
-- Added End Session endpoint
-- Fixed discovery endpoint
-- Downgrade MySQL connector dependency version from developer preview to GA release
+- Added End Session endpoint
+- Fixed discovery endpoint
+- Downgrade MySQL connector dependency version from developer preview to GA release
 
 *1.3.0*:
-- Added device flow support
-- Added PKCE support
-- Modularized UI to allow better overlay and extensions
-- Modularized data import/export API
-- Added software statements to dynamic client registration
-- Added assertion processing framework
-- Removed ID tokens from storage
-- Removed structured scopes
+- Added device flow support
+- Added PKCE support
+- Modularized UI to allow better overlay and extensions
+- Modularized data import/export API
+- Added software statements to dynamic client registration
+- Added assertion processing framework
+- Removed ID tokens from storage
+- Removed structured scopes
 
 *1.2.6*: 
-- Added string HEART compliance mode
+- Added strict HEART compliance mode