Official Developer Discussion

Anyone made any progress besides finding that CSRF? I am unable to exploit that.