Brave and other privacy-focused browsers block third-party cookies. Instead of cross-domain requests from app.thenetwork to api.thenetwork, nginx now proxies /api/* to the backend, making everything same-origin.
