Thanks. That was all Matt Barry. I just prettied it up. He literally did that in his spare time and one day showed up at work and after some smalltalk he was like "Oh, yeah by the way..." and my jaw hit the floor.
That was a few months ago. We had to go through the disclosure process via HackerOne etc.
I'm really lucky to be working with people like Matt and others on the team.