Discourse didn't pay bug bounty?