Comment by spikk

It is a little bit weird to me having a rule of first unauthenticated client side request winning here