OAuth authentication that could allow a third party who purchased a domain from a defunct startup to use it to gain unauthorized access to the accounts of former ...