https://www.haktechs.com/common-authentication-and-authorization-vulnerabilities-and-how-to-avoid-them/