What are some authentication controls we can implement? Where would we implement them and why?