United Airlines Bug Bounty: An experience in reporting a serious vulnerability