Autoswagger: Auto-detect API auth weaknesses via exposed Swagger docs