2 – Broken Authentication