https://www.akku.work/blog/the-risks-of-depending-on-password-based-login/