update bug bounty program links