Unauthorized frontend access without security token