Company’s autodiscover caused users’ test credentials to be sent outside Microsoft networks.