Thanks for correcting me - I see my web sec knowledge is getting rusty!