Cookie and Bearer Token not checked #2069
Description
MC authentication looks for the JWT in either "Authorization: Bearer" header, or "token" http cookie, but does not do any consistency check if both are specified. MC should invalidate any requests where both are specified and they do not match.