Drupal Key Auth Vulnerabilities