Some Best Practices for Web App Authentication

I probably couldn't have written it any better, so it's worth to be shared. Smile