Authentication bypass for leads to take over any users account.