[rwth-security] Let’s Bypass CSRF Protection & Password Confirmation to Takeover Victim Accounts :D