https://adriapt.github.io/posts/Auth/
Authentication vulnerabilities - Adrià Pagès