Vulnerability discovered in some survey apps that allowed manipulation of points and unlimited redemption of rewards