Lab: Referer-based access control

as functionality as before

admin to normal

now login as wiener

get the session token

get this request which is the upgrade

put the session token of wiener and change the username from carlos to wiener

done

the user wiener is now admin