Read a lot about sign-in/authentication options, best practices, and pitfalls 😰