Pitfalls of OAuth2 and CORS | Hacker News Reader