Facebook vulnerability that allowed any photo to be deleted earns $12500 bounty