https://sfeng-daydayup.github.io/posts/session-login-methods-and-possible-improvement/