[vintermann]

The last point sounds like a security vulnerability of some sort? It shouldn't be hard for Mojang to issue unforgeable tokens.