The HTTP edge of xtr security: firewalls, authenticators, bearer access tokens and the request surface.