82bd2e4d22
no need sign this simole GET to this simplify an hijacked session could retreive these assets but cannot get the list of them