Security researchers hijack celebrity Twitter accounts, and prove claimed fix failed