Microsoft fixes "BadSuccessor" zero-day authentication bug