The addresses had no dates
A release token showed up in use from four machines in AWS that I couldn't account for. Two hours later it turned out to be my own runner fleet, and I'd fixed the real problem anyway.

A release token showed up in use from four machines in AWS that I couldn't account for. Two hours later it turned out to be my own runner fleet, and I'd fixed the real problem anyway.

A browser will not attach a bearer token to a page navigation. Swapping the header for a cookie the framework already understood, without weakening it.
