Use a third party identity provider

[malfple]

Instead of managing passwords by ourselves, use a third party IDP such as google firebase to avoid common pitfalls with authn/authz