[bawolff]

Webauth checks the http origin so it only gives the code to the correct website, taking the human out of the decision loop.