Bug 959400 - [Notes] oAuth session forgery - second fix
Merge pull request #26 from yor-mozilla-com/bug959400-phase2

Bug959400 phase2