CORS CSRF JWT :flonshed: Just don't attack other folks' servers, what is going on??