Authentication is hard, let's ride tricycles