allowing anyone to bypass the authenication system and become an arbitrary drupal user. Security: vid:c0fd7890-4346-11db-89cc-000ae42e9b93