How one forgotten password unlocked the full power of shaw webmail’s darkest features