Issue #3327294 by poker10, alexpott: Username enumeration via one time login route when logged in as another user