The best bit is you go through all this drama and then some bloke finds a web form someone forgot to disable and gets access to everyone's account with one click anyway.