title: Remove session code from URL to prevent security vulnerability
body: <p>When authenticating from KeyCloak login page it pass session code as a query param. Are there a way to avoid this and pass session code in different manner (ex: as a header param)</p>
  
  <p>POST <a href="https://xxx/auth/realms/xxx/login-actions/authenticate?session_code=xxxxxxxxx&amp;execution=xxxxxx&amp;client_id=xxx&amp;tab_id=xxxx" rel="nofollow noreferrer">https://xxx/auth/realms/xxx/login-actions/authenticate?session_code=xxxxxxxxx&amp;execution=xxxxxx&amp;client_id=xxx&amp;tab_id=xxxx</a> HTTP/1.1</p>