@baris Also for the POST request during login I don't see any tokens:
*Request URL:http://kubernetes-hack-dev.acomcloud.int:31955/login
Request Method:POST
Status Code:403 Forbidden
Remote Address:10.15.1.190:31955
Response Headers:
Access-Control-Allow-Origin:null
Connection:keep-alive
Content-Length:9
Content-Type:text/plain; charset=utf-8
Date:Thu, 05 Jan 2017 15:43:23 GMT
ETag:W/"9-cilpV3qWyjlT6E49lJ3ugQ"
Vary:Accept-Encoding
X-Frame-Options:SAMEORIGIN
X-Powered-By:NodeBB
Request Headers:
Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8
Accept-Encoding:gzip, deflate
Accept-Language:en-US,en;q=0.8,ru;q=0.6
Cache-Control:no-cache
Connection:keep-alive
Content-Length:46
Content-Type:application/x-www-form-urlencoded
Cookie:express.sid=s%3AD9OO1t1_OEyIlkt6A0K4wdo9b1TCTJZ-.ZTzcwSu686tHghVwWUqJOaIwZ3zxVbg4VX5PF8YCPFA
Host:kubernetes-hack-dev.acomcloud.int:31955
Origin:http://kubernetes-hack-dev.acomcloud.int:31955
Pragma:no-cache
Referer:http://kubernetes-hack-dev.acomcloud.int:31955/login
Upgrade-Insecure-Requests:1
User-Agent:Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
Form Data
username:admin
password:zasdf@2
remember:on*