LastPass has fixed a 'highly sophisticated' security flaw in its browser extension