lloyd/connect-browserid — Issue #1: prevent login CSRF by default
Author: benadida
Created: 2011-10-25 16:42:47+00:00
State: open

this could be tricky, but it would be good if, by default, this could be secure against login CSRF. This means CSRF-protecting the /auth call.