https://tomorrowisnew.com/posts/Bookwyrm-Server-Side-Request-Forgery/