[keycloak-user] Remove session code from URL to prevent security vulnerability
When authenticating from KeyCloak login page it pass session code as a
query param. Are there a way to avoid this and pass session code in
different manner (ex: as a header param)
POST
https://xxx/auth/realms/xxx/login-actions/authenticate?session_code=xxxxx...
HTTP/1.1