Saving authentication code to the database in a new table ‘authentication_codes’, but not yet handling revocation of hash-codes (if any) - for now authentication codes will be created ad infinitum with no attempt to delete them.