JWT, OAuth, XSS, CORS