https://thund3rblog.wordpress.com/2017/02/16/bsides-san-francisco-ctf-web-easyauth-30p/

Original writeup (https://thund3rblog.wordpress.com/2017/02/16/bsides-san-francisco-ctf-web-easyauth-30p/).