Too permissive backlink user creation?
User story:
- I was logged in to api.test3.startinblox.com from my localhost ad "Admin" user.
- From another account on another computer, I removed the "Admin" user from api.test3.startinblox.com/admin/
- On my first frontend, where I was logged in as admin, I F5'd.
Now, I get two new users on test3 :
- Admin is back, with empty fields everywhere
- I also have a backlink with Unknown as name, pointing to the urlid of Admin
Of course, as this backlink is local, my frontend shows me logged in as "Unknown".
Ping @balessan for reference.