This Dutch hacker can fly a million miles on his United Airlines bug bounty