when the front end intern finds a gaping security hole in your new auth service 😬

pls sir may i have code audit?