A flaw in T-Mobile’s website allowing anyone to access customer data highlights the need for internal audits and authentication.