several enhancements (#1808)

* show all fields in timesheet api docs
* fix action dropdown links #1806
* apply same validation rules for passwords and for api-tokens #1753
* added "duplicate team" action #1136

src/Form/API/TimesheetApiEditForm.php

@@ -50,6 +50,11 @@ class TimesheetApiEditForm extends TimesheetEditForm
         $resolver->setDefaults([
             'csrf_protection' => false,
             'allow_duration' => false,
+            // overwritten and changed to default "true",
+            // because the docs are cached without these fields otherwise
+            'include_user' => true,
+            'include_exported' => true,
+            'include_rate' => true,
         ]);
     }
 }