Adding Insecure Direct Object Reference example