‘Serious’ Twitter flaw allows hackers to post on other people’s accounts