A great summary of the security measures you need for logins in web applications. Every developer should know them inside out.