Instead of mixing in the shared secret into the querystring or body, we could also specify it in a header.
Attach a file by drag & drop or click to upload
