My first thought was "Holy Shit! Cookie only authentication and you can unlock the doors, among other things!" It's absolutely vulnerable to XSRF with cookie o

My first thought was "Holy Shit! Cookie only authentication and you can unlock the doors, among other things!" It's absolutely vulnerable to XSRF with cookie only authentication. This is a huge security issue.