Complete User Account Takeover on an Android Application