Drupal Simple Oauth (oauth2) & Openid Connect Vulnerabilities