Web Application Authorization and Authentication Explained