A security bug fixed in signing up