Forget IPs: using cryptography to verify bot and agent traffic https://blog.cloudflare.com/web-bot-auth/