Booking systems‘ insecurity allows free flights and more