Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Security is one of those things that's easy to bolt on badly and hard to retrofit well. Most applications end up needing to answer four separate questions: How do we store credentials safely? How do w