Andreas Vogt - 2013-12-16

Hello,
why is a login to our time-o-meter allowed by using any password?
Invalid Usernames are not allowed, but any password..
Any ideas?