Elaborate on the BrowserID vs Hawk auth.