GitHub bug briefly gave valid authenticated session cookies to wrong users | Hacker News Reader