Cross-origin Authentication Detection
Most web applications that implement login functionality have resources that are only available post-authentication, and separate resources available to unauthenticated, anonymous visitors. Common behaviors web applications might use are replying with a 403 or 404…