Ha, I remember that some years ago I've found a silly bug that allowed you to take over white's session and play for him by just changing the url token (lichess.org/<token>). I had my fun for a handful of games, then reported it. Unfortunately, I don't know anymore why or how it worked - Maybe the creator can remember and explain it :). Crazy, how the UX changed over the years. Good job!