https://hacktorx.com/blog/mobil-insecure-authentication-authorization/