2015-04-16 - production
16:46 <csteipp> removed oauth-headers.php since that allowed stealing httponly cookies [production]