https://betterprogramming.pub/3-key-security-concepts-for-all-web-application-developers-d4f55c439302
