pub const TOKEN_HEADER: &str = "x-ssh-browser-token";Expand description
The header the token must arrive in.
Custom rather than Authorization for one reason that matters: a custom header is
not CORS-safelisted, so a page attempting to send it triggers a preflight we refuse.