[Topfi]

I had a situation yesterday were I was forced to explain that requiring a public userID with a curl request is not a safety measure. This is worse, somehow.