Logged into other people's accounts security flaw