Use headers instead, because security.