[www.32red.com] Reverse proxy misconfiguration leads to 1-click account takeover