supabase Auth Vulnerabilities