https://otabek.io/blogs/how-authentication-works