Design Flaws in Authentication Mechanisms

On the face of it, authentication is conceptually among the simplest of all the security mechanisms employed within web applications.