https://www.trickyenough.com/saas-security-challenges-and-best-practices/