Authentication Flow

Register
   ↓
Hash Password
   ↓
Store User
   ↓
Verify Email
   ↓
Login
   ↓
Authenticated Session

Cover

• Password hashing
• Never store plain passwords
• Authentication vs authorization
• Session / token concept

Don't go too deep yet.