Investigating a major security vulnerability with Clerk's Next.js integration (pilcrow.vercel.app)