hackerone Hapi Auth Jwt2 Node Module Vulnerabilities