Authentication Vulnerabilities - Lab #3 Password reset broken logic | Long Version