AdGuard resets all user passwords after credential stuffing attack