On Sun, 2013-03-10 at 10:55 +0100, Pierre-Yves Chibon wrote:
The idea here is to prevent someone from login in via the API
mechanism and performs action which are outside of the API.
This one is actually pretty important. At the moment using curl and the
right arguments I can change my API token, with this commit I cannot
anymore :)
Pierre