[1.4.7] Security fix: 2013 authentication exploit