Okta just fixed a very weird security bug for accounts with long usernames