[SECURITY] SQLi in AuthenticationService