trustedsec.com/blog/full-disclosure-a-third-and-fourth-azure-sign-in-log-bypass-found