https://pages.ruofeng.me/posts/authentication-with-php-6/