thephpleague Oauth2 Server Vulnerabilities