Some Best Practices for Web App Authentication(codingkilledthecat.wordpress.com)

http://codingkilledthecat.wordpress.com/2012/09/04/some-best-practices-for-web-app-authentication/