Also, some places (the help popups) use the session key whereas they should just be anonymous and public GET requests. (There is no need to pass login credentials there.)
Also, some places (the help popups) use the session key whereas they should just be anonymous and public GET requests. (There is no need to pass login credentials there.)