https://nullphpscript.com/post/secure-php-and-ajax-login-script/