How not to create a secure login experience

I guess I will protect the guilty and not provide a link.