Authentication is something most non-trivial web applications need to tackle, and there are a lot of (conflicting) opinions about how it should be done.
Lets look at some approaches to the problem, with links to further details. When I just started programming, I worked at a tiny start-up.
Our CTO lead…