authentication 1 OAuth Account Takeover: Exploiting Email Change Without Re-authentication Nov 24, 2024