A basic guideline on implementing auth for the web.