Loom: Cache configuration change leading to account vulnerability

Algolia isn't coughing up the prior art about this, but there was another recent incident caused by this same CDN+cookie header mismatch