Cox fixed an API auth bypass exposing millions of modems to attacks