How not to create a secure login experience


I guess I will protect the guilty and not provide a link.