https://www.illusionsofwisdom.com/building-secure-authentication-systems-best-practices/