@kaia That makes sense, it probably uses an HMAC (a way to sign requests, which incorporates a timestamp so it can lock down the request validity duration, and to prevent replays.) I used them at my old job because they greatly increase security and my boss got so irritated because of support requests where the user's clock was off "nobody else's application does this!"