      function auth (data, fn) {
        data.query.should.have.foo;
        data.query.foo.should.eql('bar');
        fn(null, false);
      };
The software uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.