How would you proceed to add a login to your website? Setup a database with bcrypted credentials? Use a service / oss? What are common pitfalls? What's your thought on Auth0, Azure AD B2C, Keycloak, ORY (especially Kratos) and others? Would you still recommand using a full-blown solution if there are just basic customer logins required (not even self registration)?