https://techdefenderhub.com/authentication-security-in-web-applications-best-practices/