Steam Wallet API vulnerability