HackerOne Bug Bounty Disclosure: api-docs-expose-an-active-token-for-the-sample-domain-theburritobot-combysainaen