2021-08-16 UTC
# 
jamietanna re your thoughts yesterday about sending the Bearer token in a cookie, I'd opted for encrypting the cookie with a shared secret owned by the Micropub client, but then when the form is rendered it's in the `access_token` hidden field