WordPress iOS app leaked authentication tokens

Automattic plugs leaky WordPress.com iOS app that exposed account security tokens to third-party sites.