I hacked a dating app (and how not to treat a security researcher)