Hacktivity from ahsantahir
https://hackerone.com/reports/161408
[cfire.mail.ru] CSRF Bypassed - Changing anyone's 'User Info'
https://hackerone.com/reports/161408