Predictable Recovery

A recovery service used a linear congruential generator for security tokens and exposed two consecutive outputs.

Inspect /api/hard/recovery/sequence, calculate the next output locally, then send it as token to /api/hard/recovery.