We found TeaOnHer spilling users' driver's licenses in less than 10 minutes