Have you taken a look at the CL mobile app? I do web scraping for work and most of the time web apps are a lot less secure when it comes to exposing APIs or raw data.