Auth is actually really hard, with many really subtle high impact mistakes one can make.