Dropbox authentication: insecure by design