XSS account persistence with oauth
github.com