How I Was Able to Takeover User Accounts via CSRF on an E-Commerce ...