Why you should stop using the OAuth implicit grant | Dark Hacker News