[darthwalsh]

Sounds like authentication is working great, but their authorization design may be flawed.

[filleduchaos]

How is it flawed? That is the nature of crowdsourcing.