Auth QOR authentication solution TODO Database (username/password) Session storage Confirm Reset Password Captcha JWT Phone / Verification Code Http Auth ? OAuth OpenID