OAuth implicit flow and confused deputy problem | Hacker News Reader