https://www.javacodegeeks.com/2018/04/user-authentication-best-practices-checklist.html