Oh, no, better cut off browser access, allowing only mobile apps from verified devices to have access /s