Google Identity Toolkit accepts 1 character long passwords · HackerTrans