4.6.0

What's Changed

• Bump cryptography from 41.0.4 to 41.0.6 by @dependabot in #535
• Do not check JWT_TOKEN_LOCATION when testing if cookie_csrf_protect is enabled by @vimalloc in #538

Full Changelog: 4.5.3...4.6.0