RSA Conference mobile app has vulnerabilities, researchers say