Toward a secure and usable cloud-based password manager for web browsers
The devil is in the (implementation) details: an empirical analysis of OAuth SSO systems