Best practices for user account, authorization and password management