https://php-include.com/php-security-implementing-secure-token-based-authentication/