"Stealth" Authentication - how to not leak information to hackers in web application authentication