writing secure user authentication in c