RemoteIp trusts link-local IP ranges, has_secure_token expiration gets config | Hacker News Reader