[H-2] Lack of access control in `MerkleAirdrop.sol::claim()` function lets a user claim more than once