Insecure direct object references.md

1. Access the chat from the app and download the transcript;

2. Change the transcript value to 1.txt and got the password;

3. Log in into carlos account;