- Passwords to their own table - When user logs in, if password correct, save it to our db - If password saved to our db, update tmc to let it know password is handled on courses.mooc.fi side -> tmc will do auth through courses.mooc.fi - Use argon2id to store the password - Maybe use some rust type to protect the passwords in memory?