Am I the asshole for being angry at a friend because she gave my irctc ID and password to her friend without telling me?

She was my classmate and we are on good terms. She asked me for my IRCTC ID and I gave it to her, no questions asked. There was a lot of ticket booking and cancelling in my account after that but I paid no attention to it. Just now I got a sms that a tatkal ticket has been confirmed and I'm curious to see where she's going. So I log in and find out that it's a ticket for some other people whom I don't know. I thought she booked it for them and called her to let her know that her ticket has been confirmed. She picks up the phone and sounds really sleepy, so I playfully asked her if booking a ticket was so exhausting that she fell asleep right after. To this she said, I did not book any tickets today, this shocked me. So I sent her a copy of the ticket and asked if she knows any of these people. She said yes that's my friend and her parents, she must have booked the ticket. Now I'm confused and she tells me she gave my ID and password to her friend to book the tickets in case she is asleep at that time. I tell her that I gave it to her for herself, not to pass it around to strangers and she says that she did not give it to strangers, just to her friend. She goes on to say that her friend is only in India for a few days so it doesn't matter. I'm so angry, I disconnect the call and she is mad that I would call her out on such a 'small' thing. So, am I overreacting? Being an asshole?