The Copenhagen Book: General Guideline on Implementing Auth in Web Applications
https://news.ycombinator.com/item?id=41801883