Student awarded $36,000 for remote execution flaw in Google App Engine