Portswigger Web Academy JWT: JWT authentication bypass via weak signing key #130