Portswigger: User ID controlled by request parameter

Using the Portswigger Access Control Labs to learn a bit about web security.