RemoteIp trusts link-local IP ranges, has_secure_token expiration gets config | Dark Hacker News