LastPass has patched a vulnerability in its Firefox add-on that allows attackers complete remote compromise of the password manager