GitLab Patches Critical Account Takeover Flaw