Bug allowed full takeover of Samsung user accounts