Authentication 2 Pre-Account Takeover via OAuth: The Bug That Waits For You Jul 29, 2026 JWT Attacks & Token Entropy Analysis with Burp Sequencer Dec 6, 2025