Security Flaws in LastPass Exposed User Passwords