https://medium.com/@david.gilbertson/my-first-exploit-a-site-that-allows-setting-any-users-password-a07b1142af2c
