Authentication and authorization is not a fun topic for most people It's generally that thing that has to be there  but nobody really cares about And on top of that  every time the requirements are a little different