Why you should stop using the OAuth implicit grant | Hacker News Reader