kevin is trying to utilize query string manipulation to gain access to her email account