US airline United rewards two hackers who spotted security holes in its website with a million free flight miles each.