Adding a nonce/token to the account status

[Edward Lee]

It would be useful to have the server provide a token so that it can
be sent back for actions like "logout". In particular, Wordpress'
logout requests includes a wpnonce to prevent unintended logouts.

In addition to providing the status and name, it could give a token, e.g.,

X-Account-Management-Status: active; name="Edward Lee"; token=abcd1234

And add token as a valid field for actions, e.g.,

"disconnect": {
"method": "GET",
"path": "wp-login.php?action=logout"
"params": {
"token": "wpnonce"
}
}

Ed

[Dan Mills]

I like it!