HackerOne Bug Bounty Disclosure: attacker-can-bypass-authentication-build-on-ingress-external-auth-(`nginx-ingress-kubernetes-io/auth-url`)bythisbug