https://ipnet.xyz/2009/03/authentication-with-a-twist/