Biscuit – an authorization token with offline attenuation | Hacker News Reader