Securing User Accounts: Fundamental Security Concepts