Aaron Parecki

"The only problem was it turned out that even if you did have the secret key you often couldn’t use the token either, because it was just too hard to get request signing to work reliably. Some brave souls periodically try and revive this idea."

`window.addEventListener("beforeunload", function() { debugger; }, false)`