Authentication hardening:  Set nullified access_token cookie on login, and verify that Authorization header is nullified anywhere token authentication is used.
Authentication hardening:  Set nullified access_token cookie on login, and verify that Authorization header is nullified anywhere token authentication is used.

bitvector2/microservice2,bitvector2/microservice2,bitvector2/microservice2,bitvector2/microservice2