tl:dr: Tapplocks api endpoints had no security checks other than a valid token to access any data.This
