Slack bug granted hackers full access to accounts, messages

Stealing user authentication tokens would've given an attacker full access to that user's account.