catalyst User Key Authentication Plugin Vulnerabilities